On 09/29/2014 05:22 PM, apmailist@xxxxxxx wrote:
WE need to filter out "() { :;};" patterns If I understand correctly,
Not exactly since http uses encoding on urls.
it will needed to be with percents and weird values.
You will need ICAP\ECAP level of inspection to make sure nobody is
bitten by it.
It will by much faster to just patch bash.
All The Bests,
Eliezer
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
