https://bz.apache.org/bugzilla/show_bug.cgi?id=58599

--- Comment #4 from pablo <[email protected]> ---
(In reply to Eric Covener from comment #3)
> Sorry, but I don't follow where the remote attacker or even HTTP server are
> involved with what you describe. We can only respond to bug reports about
> httpd, not speculate about what happens when you type into your browser
> while a website is loading.

This can DoS the server, I believe that is included here or am I getting it
wrong?http://httpd.apache.org/security/impact_levels.html in the important dos
is included, and this is a DoS to the server because you don't strip javascript
or because of something not quite right somewhere, if this is not in scope for
here where should i report it?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to