You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@trafficserver.apache.org by danobi <gi...@git.apache.org> on 2015/11/30 16:49:51 UTC
[GitHub] trafficserver pull request: YTSATS-659 XSS via Host header for 404
GitHub user danobi opened a pull request:
https://github.com/apache/trafficserver/pull/355
YTSATS-659 XSS via Host header for 404
Validate the host header string to prevent malformed hostnames from being let in.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/danobi/trafficserver TS-4043
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/trafficserver/pull/355.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #355
----
commit db4ad907fb75ee213dffef95bd774f5b14729fa7
Author: Daniel Xu <dl...@yahoo.com>
Date: 2015-11-23T20:35:41Z
YTSATS-659 XSS via Host header for 404
Validate the host header string to prevent malicious javascript
inclusion
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---
[GitHub] trafficserver pull request: TS-4043 Prevent bogus FQDN characters ...
Posted by danobi <gi...@git.apache.org>.
Github user danobi closed the pull request at:
https://github.com/apache/trafficserver/pull/355
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---
[GitHub] trafficserver pull request: TS-4043 Prevent bogus FQDN characters ...
Posted by danobi <gi...@git.apache.org>.
Github user danobi commented on the pull request:
https://github.com/apache/trafficserver/pull/355#issuecomment-160669072
Messed up the commit message -- going to redo this
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---