httpd-test-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From john sachs <>
Subject [ IBM AS/400 HTTP Server '/' attack]
Date Thu, 08 Nov 2001 22:51:49 GMT
after this was reported, i knew apache was not affected, but i thought id write
a quick test to add to the suite just to make sure it never got introduced.
anyway, in doing so, i noticed that 1.3 serves the page as you'd expect.  in
2.0, you get 404.  which is "correct"?  i kinda think 404 is correct.  if i add
a test to check for 404, this test will fail on 1.3.  what you guys think?
or is this problem so lame it will never show up in apache and we dont even need
to test for it?

View raw message