Re: squid 7.1 , url_rewrite_program does not work

Dmitry Melekhov <[email protected]> Wed, 22 Oct 2025 13:04:53 +0400
Newsgroups gmane.comp.web.squid.general
Message-ID <[email protected]>
22.10.2025 12:55, Stuart Henderson пишет:
> On 2025-10-22, Dmitry Melekhov <[email protected]> wrote:
>> 22.10.2025 08:17, Amos Jeffries пишет:
>>> Any server could easily respond with HTTPS on port 80 - especially
>>> since the domain "http" is rare and likely crafted to exist by an
>>> attacker.
>> Sorry, I don't see any real problem here, otherwise all squids before 7
>> are affected.
> "all squids before 7 are affected" - surely that's exactly why this was
> tightened up?
>
>
I didn't see any CVE about this.

And 6 blocked not allowed urls, 7 just allows them without any info to user.

So which one is more secure?


_______________________________________________
squid-users mailing list
[email protected]
https://lists.squid-cache.org/listinfo/squid-users