JP wrote:

Sam, if someone else were to write an acceptable patch that updated SQWebmail to handle larger cookies, would you be willing to accept it into the main trunk?

All the patch needs to do is redefine SOCKENVIRONLEN in sqwebmail.h. It's currently set to 4k. The RFCs for the cookie mechanism recommend that agents support at least 20 cookies of at least 4k each. Conceivably, you might argue that sqwebmail should deal with at least 80k of cookie input.

While making that argument, consider that allowing greater input means that you may increase the likelihood of a buffer overflow occurring in one of the external tools that sqwebmail uses. Also consider that while using sqwebmail, you're going to be sending 4k+ of data for every link you click on. It's not going to move very fast. Regardless of whether or not sqwebmail "should" accept larger input sizes, I'd personally work on keeping siteminder's data out of sqwebmail.

The modification required is minor enough that it can be done for the site that needs it.

http://zvon.org/tmRFC/RFC2109/Output/chapter6.html#sub3
http://zvon.org/tmRFC/RFC2965/Output/chapter5.html#sub3


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to