Re: [squid-users] Re: NULL characters in Header - how to get which sites generate this?

On 11/30/2012 11:22 AM, Omid Kosari wrote:
> is it possible to remove that NULL by something like squid header modify ? or
> a way to ignore it ?
> a workaround to it work even if it is http violation ?

I am just wondering about something.
In ssl-bump there is a thing at the bump-server-first that will pass the
request along if the server is not a SSL one, am I right?

Just curios if it will be possible to do almost the same for http request.
kind of: HTTP-BUMP-CLIENT-FIRST :D
which will try to identify if the request is not trying to do HTTP
request\proxy and if so will use ACLs to allow or deny it?

I think it can lead to security vulnerability but if it's simple then it
will be nice.

Eliezer

>
>
>
> --
> View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/NULL-characters-in-Header-how-to-get-which-sites-generate-this-tp4656561p4657516.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
>

-- 
Eliezer Croitoru
https://www1.ngtech.co.il
sip:ngtech_at_sip2sip.info
IT consulting for Nonprofit organizations
eliezer <at> ngtech.co.il