Re: url isn't sanitized in logs
"Matthew R. Dempsky" <[email protected]> Thu, 23 Mar 2006 17:17:05 -0600
| Newsgroups | gmane.comp.web.fnord |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Mar 22, 2006 at 05:43:13PM -0600, Matthew R. Dempsky wrote: > (I will try to look into these more later.) I am using the patch at http://odin.dempsky.org/patches/httpd.c.patch to try to correct these problems. (Disclaimer: I don't use COLF, so I haven't tested that path at all.) I tried to follow forward from all the call sites for dolog() and make sure url isn't still needed anywhere, and I didn't notice anywhere it is, but I also didn't look too hard.