Re: [squid-users] Re: NULL characters in Header - how to get which sites generate this?

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 30 Nov 2012 23:32:36 +1300

On 30/11/2012 10:22 p.m., Omid Kosari wrote:
> is it possible to remove that NULL by something like squid header modify ? or
> a way to ignore it ?
> a workaround to it work even if it is http violation ?

It is not just a violation / doing something wrongly. It is a full
corruption of the protocol. This is what Squid received:

...
Accept:\0x20*/*\r\n
Content-Type: application/x-www-form-urlencoded\0x00Accept:\0x20*/*\r\n
Content-Type: application/x-www-form-urlencoded\r\n
...

One Accept header and two Content-Type headers with *different* values.

One type header says the response is a
"application/x-www-form-urlencoded" object
the other says it is some weird
"application/x-www-form-urlencoded\0x00Accept:\0x20*/*" object.

It is far better, safer, and easier to fix the applications creating
these corruptions than to produce complex processing hacks which slow
all traffic down or cause side effects of their own just to fix a rare
case which will be rejected by any other protocol compliant software anyway.

Amos
Received on Fri Nov 30 2012 - 10:32:53 MST

This archive was generated by hypermail 2.2.0 : Fri Nov 30 2012 - 12:00:08 MST