httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Eric Covener <cove...@gmail.com>
Subject Re: mod_deflate DoS using HEAD
Date Tue, 22 Jun 2010 13:33:17 GMT
On Tue, Jun 22, 2010 at 2:37 AM, Ruediger Pluem <rpluem@apache.org> wrote:
> Does someone still have Eric's patch? Seems that I can't find it right now.

This is what I have, but I never got off the fence back then much less now:

Index: modules/filters/mod_deflate.c
===================================================================
--- modules/filters/mod_deflate.c       (revision 793619)
+++ modules/filters/mod_deflate.c       (working copy)
@@ -578,7 +578,7 @@
        deflate_check_etag(r, "gzip");

        /* For a 304 response, only change the headers */
-        if (r->status == HTTP_NOT_MODIFIED) {
+        if (r->status == HTTP_NOT_MODIFIED || r->header_only) {
            ap_remove_output_filter(f);
            return ap_pass_brigade(f->next, bb);
        }




-- 
Eric Covener
covener@gmail.com

Mime
View raw message