Re: Simple way to bypass squid ACLs (fwd)

Preleminary patches for 1.1.20 and 1.2.beta15 are available from
http://hem.passagen.se/hno/squid/

---
Henrik Nordström
Sparetime Squid Hacker
> -----BEGIN PGP SIGNED MESSAGE-----
> 
> Good $daytime,
> 
> Software:       Squid Internet Object Cache
> Version:        1.1.20 (at least)
> Summary:        any URL-based ACLs can be bypassed using
>                 simple rewriting
> Impact:         renders any access control based on url_regex
>                 and/or urlpath_regex unusable