Re: Peer cache connect problem

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 20 Oct 1999 23:20:27 +0200

Irfan Akber wrote:
>
> I have noticed that it not only fails with having special
> characters in domain name but also anywhere in the url e.g
>
> www.example.net/one&only

Not mine anyway. It happily accepts mostly any characters in the URL
outside the host name. Tested with
<http://www.example.com/%e5%e4%f62fa%!"$8()(˝§@櫢eee> and it got forwarded
quite nicely.

The validations Squid perform is:

a) The host name must consist of valid charaters [a-z0-9.-]. This check
is hardcoded and can't be disabled without changing the source.
b) The urlpath & query must not contain white space. (space or tab).
This check can be controlled by uri_whitespace in squid.conf. (note: the
encode setting is flawed in Squid 2.2, use either deny or allow)

--
Henrik Nordstrom
Squid hacker
Received on Wed Oct 20 1999 - 16:41:05 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:49:00 MST