httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Raphael Amaury Jacquot <sxp...@esitcom.org>
Subject Re: Patch: PR#7063
Date Wed, 27 Mar 2002 21:34:35 GMT
On Mon, 2002-03-25 at 23:23, Marc Slemko wrote:
> On Mon, 25 Mar 2002, Eli Marmor wrote:
> 
> > And a yet another note:
> > 
> > It is not a bug that "sometime" causes problems;
> > It is a bug that causes mod_auth_digest to fail ALWAYS (when there are
> > parameters, of course).
> 
> That is defined as "sometimes".  And it is only IE with which it fails,
> no?

No, mozilla (all platforms) does this too

> 
> > So it looks important for me to commit this patch.
> > Especially when there is no need to dig into the source, find the
> > problem, fix it, and test it, but everything is ready and you just have
> > to commit.
> 
> Isn't this a matter of IE incorrectly implementing the spec?  
> 
> Will making this change break browsers that do properly implement it?
> 
> It is not obvious if or how we should attempt to cope with IE's 
> brokenness, so it is not something that can just be blindly
> applied.  Blindly ignoring the query string on a request can have
> security implications as well that need to be understood.


Mime
View raw message