Commit 58c365c2 authored by Joe Orton's avatar Joe Orton
Browse files

Don't talk about request smuggling in the response handling fix.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@209854 13f79535-47bb-0310-9956-ffa450edef68
parent 80acca9d
Loading
Loading
Loading
Loading
+2 −3
Changes for CHANGES: 2 added lines, 3 removed lines.
Original line number Diff line number Diff line
@@ -30,8 +30,7 @@ Changes with Apache 2.1.6
  *) proxy HTTP: If a response contains both Transfer-Encoding and a 
     Content-Length, remove the Content-Length and don't reuse the
     connection, stopping some HTTP Request smuggling attacks.
     [Jeff Trawick]
     connection.  [Jeff Trawick]
  *) mod_cgid: Fix buffer overflow processing ScriptSock directive.
     [Steve Kemp <steve steve.org.uk>]
@@ -122,7 +121,7 @@ Changes with Apache 2.1.5
  
  *) mod_deflate: Merge the Vary header, isntead of Setting it. Fixes
     applications that send the Vary Header themselves, and also apply 
     mod_defalte as an output filter. [Paul Querna]
     mod_deflate as an output filter. [Paul Querna]
  *) Change the default (when not present in the config file) setting
     for UseCanonicalName to Off.