Search squid archive

Re: Re: NULL characters in Header - how to get which sites generate this?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 30/11/2012 10:22 p.m., Omid Kosari wrote:
is it possible to remove that NULL by something like squid header modify ? or
a way to ignore it ?
a workaround to it work even if it is http violation ?

It is not just a violation / doing something wrongly. It is a full corruption of the protocol. This is what Squid received:

...
Accept:\0x20*/*\r\n
Content-Type: application/x-www-form-urlencoded\0x00Accept:\0x20*/*\r\n
Content-Type: application/x-www-form-urlencoded\r\n
...


One Accept header and two Content-Type headers with *different* values.

One type header says the response is a "application/x-www-form-urlencoded" object the other says it is some weird "application/x-www-form-urlencoded\0x00Accept:\0x20*/*" object.

It is far better, safer, and easier to fix the applications creating these corruptions than to produce complex processing hacks which slow all traffic down or cause side effects of their own just to fix a rare case which will be rejected by any other protocol compliant software anyway.

Amos


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux