High ASCII cookies bug in Apache 2.0
This is a discussion on High ASCII cookies bug in Apache 2.0 within the Windows Web Servers forums, part of the Web Server and Related Forums category; Request: GET /cgi-bin/1.pl HTTP 1.1 Cookie: name=qqq If write some symbols with codes higher than ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
02-24-2004
|
|||
|
|||
High ASCII cookies bug in Apache 2.0
Request:
GET /cgi-bin/1.pl HTTP 1.1 Cookie: name=qqq If write some symbols with codes higher than 127 instead of qqq, CGI-script will get same number of characters in variable $ENV{"HTTP_COOKIE"}, but they will be strangely converted into symbols with codes not greater than 127. In Apache 1.3 everything worked perfectly. I'd like to know if there is any standard on restricting character values in HTTP request. If there is no one, this should be bug. |
Linear Mode
