Re: [squid-users] Squid-2.4 STABLE7

That Squid will now properly reject any requests attempting to use
Transfer-Encoding.

For user-agents (proxies) playing by the books this means nothing as
HTTP forbids the use of Transfer-Encoding within HTTP/1.0 in the
first place, but this change makes Squid behave better in the case
there is user-agents who mistakenly (or maliciously) attempts to sent
Transfer-Encoded requests via Squid.

A user-agent mistakenly attempting to sent Transfer-Encoding via Squid
will now receive a proper error message instead of having it's
request silently trashed in unexpected ways...

A malicious user trying to abuse HTTP is also thrown an error page..

Regards
Henrik

On Wednesday 17 July 2002 01.05, Jigar Rasalawala wrote:
> Hi, guys
>
> I went to
> http://www.squid-cache.org/Versions/v2/2.4/diff-2.4.STABLE6-2.4.STA
>BLE7.gz and found following lines.
>
> START OF LINES :
>
> Squid now drops any requests using transfer-encoding.
> + Squid is a HTTP/1.0 proxy and as such do not support
> + the use of transfer-encoding.
>
> END OF LINES :
>
> What does it mean ?
>
> Thanks
> J
Received on Tue Jul 16 2002 - 17:28:24 MDT