"Mr. Blue" <[EMAIL PROTECTED]> wrote:

> Ok thanks Fabian,

You're welcome.

> I've already looked there and fixed it like this:
> 
> {+client-header-filter{hide-tor-exit-notation}}
> .exit/

Note that hide-tor-exit-notation can also clean Referer headers,
but if you only apply it to requests for hosts ending with .exit,
"tainted" referrers to other hosts could slip through.

Of course that's only an issue if you aren't already
blocking referrers across different hosts anyway.

Fabian

Attachment: signature.asc
Description: PGP signature

Reply via email to