[PATCH] 3.0/3.1 : send 307 status from deny_info

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 17 Nov 2010 17:16:19 +1300

This makes Squid send an HTTP/1.1 307 status response to 1.1+ clients if
the deny_info directive is used to redirect non-GET/HEAD requests.

Current behaviour is to use a 302, which browsers will prevent
displaying for security protection against injection attacks. Using 307
will give browsers a better chance to identify the redirects and handle
them safely.

3.2+ has a different patch coming which allows configuration of the 3xx
status code to override this default.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.9
   Beta testers wanted for 3.2.0.3

Received on Wed Nov 17 2010 - 04:16:24 MST

This archive was generated by hypermail 2.2.0 : Thu Nov 18 2010 - 12:00:05 MST