https://bz.apache.org/bugzilla/show_bug.cgi?id=58001

--- Comment #2 from b...@univention.de ---
Cool! This looks good. Except that the content of the "Host" header is not
escaped, which could raise security threats if the request Host header contains
chars like ";

3635 host_param = apr_pstrcat(r->pool, "; host=\"", host, "\"", NULL);

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

Reply via email to