Re: stripping after question-mark

rstagg@csc.com wrote:
>
> Joe,
>
> The reason for this stripping is that the CGI parameters can often contain
> passwords and other information of a confidential or sensitive nature (eg
> what people are typing into search engines).
>
> For reasons of discretion, it's not logged by default.
>
> However, I've enabled full logging on my Squid as well; it's not a problem.

Same here. We have client requirements to log certain kinds of data,
relating to the statistical analysis of search-engine requests. Since
the analysis process is limited to only a few specific engines, and the
logs are not widely available, we don't experience any privacy problems.
It'd be nice to see it as an option to configure though.

>
> joe@vpop.net on 11/12/98 09:42:43
> Hi,
> I was wondering why in url.c urlCanonicalClean() all data is stripped after
> the question-mark. I would like to have this information in the logfiles.
> I have commented out the code that strips the string after the question
> mark and so far haven't seen any adverse effects. Am I breaking something?
Received on Mon Dec 14 1998 - 20:03:51 MST