From: Ruediger Pluem <rpluem@apache.org>
Date: Sat, 16 Feb 2013 18:27:36 +0000 (+0000)
Subject: * Withdraw comment and vote as test was fixed in r1446920 to expect URI encode refere... 
X-Git-Tag: 2.2.24~16
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e2168c1a47a9c0a674d175aacb5d3f9b2a306835;p=thirdparty%2Fapache%2Fhttpd.git

* Withdraw comment and vote as test was fixed in r1446920 to expect URI encode referer instead of HTML escape one.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1446921 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 91145855484..6af8d62b10e 100644
--- a/STATUS
+++ b/STATUS
@@ -201,15 +201,7 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      2.4.x patch: http://svn.apache.org/viewvc?view=revision&revision=1418941
                   http://svn.apache.org/viewvc?view=revision&revision=1425750
      2.2.x patch: http://people.apache.org/~rjung/patches/host-and-uri-escaping-2_2.patch
-     +1: rjung
-     rpluem says: Now t/security/CVE-2005-3352.t fails. Not sure if this is a real
-     regression or if just the test is wrong, but this should be investigated.
-     rjung: The test sends a Referer '">http://fish/'.
-            The original code returns '<a href="http://IP/&quot;&gt;http://fish/">'
-            The patched code returns  '<a href="http://IP/%22%3ehttp://fish/">'
-            This seems to be even better IMHO. 2.4 also returns the percent encoded
-            variant, so the test should fail there as well.
-     rpluem replies: So I guess the test should be fixed.
+     +1: rjung, rpluem
 
 PATCHES/ISSUES THAT ARE STALLED