[
https://issues.apache.org/jira/browse/TS-4043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15032076#comment-15032076
]
Leif Hedstrom commented on TS-4043:
-----------------------------------
Couple of thoughts on this:
1) The Currently active RFC for URIs is rfc3986.
2) I don't think your proposed fixes would deal with the (allowed) IPv6
addresses.
3) I also don't think it allows for the percent-encoding that is required to
deal with UTF encoded hostnames?
> Prevent bogus FQDN characters in host header
> --------------------------------------------
>
> Key: TS-4043
> URL: https://issues.apache.org/jira/browse/TS-4043
> Project: Traffic Server
> Issue Type: Bug
> Components: Security
> Reporter: Daniel Xu
> Assignee: Leif Hedstrom
>
> Currently ATS isn't checking if a character is valid before letting it in as
> a hostname.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
