httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dean Gaudet <dgau...@arctic.org>
Subject Re: yet another possible IE4 HTTP/1.1 bug that I haven't heard about...
Date Tue, 13 Jan 1998 21:37:35 GMT
Nevermind, I'll agree with you guys because I think I've found another
potential security hole.  Details and patch in a few. 

Dean

On Tue, 13 Jan 1998, Dean Gaudet wrote:

> 
> 
> On Tue, 13 Jan 1998, Marc Slemko wrote:
> 
> > '_' is an ugly thing to use everywhere, there are a number of variables
> > that have to be dealt with, very few people use the variables in the env,
> > and there is precedent for changing - to _ in variable names.
> 
> There are exactly two variables that we define.  The user can fix their
> own definitions if they have any.
> 
> Is '.' allowed in environment variables? 
> 
> Dean
> 
> 


Mime
View raw message