httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Yann Ylavic <ylavic....@gmail.com>
Subject Re: Better ap_casecmpstr[n]?
Date Tue, 29 Dec 2015 16:28:50 GMT
On Tue, Dec 29, 2015 at 5:16 PM, Jim Jagielski <jim@jagunet.com> wrote:
> In a sep thread on dev@apr, OtherBill appears to be trying to
> determine the "right" name for the APR impl... maube we should
> wait to see what it's decided on there and we can follow
> suit.

OK, although we won't be able to use APR's functions until we require
(at least) APR-1.6.x.
Maybe a follow up patch/backport could later "#define ap_casecmpstr[n]
apr_whatever" when available?

>
> PS: What determines "abusive" usage?

When used to compare something which is not a HTTP token or a scheme
(eg. config parameters).
As I see it, the valid usage is against remote/untrusted data known to
be defined in POSIX/C locale only...

Mime
View raw message