]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
proxy HTTP: If a response contains both Transfer-Encoding and a
authorJeff Trawick <trawick@apache.org>
Thu, 23 Jun 2005 19:20:29 +0000 (19:20 +0000)
committerJeff Trawick <trawick@apache.org>
Thu, 23 Jun 2005 19:20:29 +0000 (19:20 +0000)
commitf5cd1725712a2720836cfb0d6c93ad4241af4809
tree39a989c98d953a77be6e14b0189ec9c49cb4ec86
parent8c8f84d0a336ae22247b0db688454a7fd38f4d6e
proxy HTTP: If a response contains both Transfer-Encoding and a
Content-Length, remove the Content-Length and don't reuse the
connection, stopping some HTTP Request smuggling attacks.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@193205 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
modules/proxy/mod_proxy_http.c