Re: FW: Debian Bug#320585: sitecopy: should not use Depth: Infinity for DAV

Reed Snellenberger wrote:
> 
[..]
> 
> Package: sitecopy
> Version: 1:0.15.1-1
> Severity: normal
> 
> When working in (at least) the --fetch mode, sitecopy issues a PROPFIND
> request with Depth: Infinity (presumably to get a complete file list in one
> request).  This results in a 403 Forbidden return from any attempt to issue
> a sitecopy --fetch for a new site.
> 
> However, the WebDAV working group has stated that Depth: Infinity PROPFIND
> requests shouldn't be issued by well-behaved client software, due to
> resource consumption issues and the possibility of DoSing a web server.  As
> a result, the default config of many DAV implementations (including Apache's
> mod_dav) is to disallow such PROPFIND requests.
> 
> - Matt
> 

For the record, I reported that one to this list in the past as well..

TTimo
_______________________________________________
sitecopy maillist  -  [email protected]
http://dav.lyra.org/mailman/listinfo/sitecopy