Graham Leggett wrote: > On Wed, September 20, 2006 5:27 pm, Brian Akins wrote: > >> unless 0 is a valid content-length, which it can be. Also, what about >> when we are reading something in without a know C-L, for example from an >> origin doing chunks? > > I am not sure what the current cache code does to handle chunked entities > without a content length - in theory allowing the code to cache bodies of > no predetermined size leaves the cache open to a potential DoS. >
Nothing, IIRC. Any reason we can't add a C-L filter immediately after CACHE_SAVE to de-chunk and C-L it as needed?
