From: Joe Orton <jorton@apache.org>
Date: Thu, 8 Aug 2019 14:06:40 +0000 (+0000)
Subject: proxy-balancer XSRF/XSS fixes.
X-Git-Tag: 2.4.41~20
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8249689ac1d924437ac88f4aaf1ae67daabcef02;p=thirdparty%2Fapache%2Fhttpd.git

proxy-balancer XSRF/XSS fixes.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1864706 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 95fdcdd94b9..a939ea65ed0 100644
--- a/STATUS
+++ b/STATUS
@@ -152,6 +152,12 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
              reworked, etc.. I would like to avoid a patch that is clearly wrong for some reviewer sitting here for
              months/years without any action item :)
 
+  *) mod_proxy: Improve XSRF/XSS protection.
+     trunk patch: http://svn.apache.org/r1864693
+                  http://svn.apache.org/r1864695
+                  http://svn.apache.org/r1864703
+     2.4.x patch: http://people.apache.org/~jorton/ap_pb_xsrf.patch
+     +1: jorton, 
 
 PATCHES/ISSUES THAT ARE BEING WORKED
   [ New entries should be added at the START of the list ]