httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Roy T. Fielding" <field...@ebuilt.com>
Subject Re: ap_get_server_port
Date Tue, 15 May 2001 23:25:45 GMT
>   I feel that httpd should pick up the port from the Host header, if one is
>   present.  The documentation of UseCanonicalName, as I read it, indicates this
>   behavior.

No.  The reason we do not do this is because the security context depends
on the physical incoming port, and allowing the client request data to
override it would aloow the client to defeat the context.

....Roy


Mime
View raw message