*Match, RewriteRule POLA violation?

2015-04-27 Thread Jim Riggs
This came up at ApacheCon a couple of weeks ago. I just took this knowledge for granted, as I have always accounted for it, but both Rich and Trawick were surprised. As I thought about it some more, it seems this may be a POLA violation. Thoughts? If we agree it should be fixed, I can make the

mod_proxy, flushing additional response data

2015-04-27 Thread RĂ©gis Leroy
Hello, I've a patch proposal in this ticket : https://bz.apache.org/bugzilla/show_bug.cgi?id=57832 The goal is to make mod_proxy conformant to this part of rfc 7320 about the good way of preventing effects of backends compromised by http splitting/http smuggling attacks. rfc 7320: If the

Re: Balancer manager

2015-04-27 Thread Jim Jagielski
Can you list 'em here? I'd like to help w/ adding them :) On Apr 25, 2015, at 12:28 PM, Daniel Ruggeri drugg...@primary.net wrote: +1 There are also some neat-o features I added in my notes during ACNA to stick into the balancer manager, too... I plan to get around to them in vague,

Re: ALPN patch comments

2015-04-27 Thread Stefan Eissing
Am 25.04.2015 um 11:47 schrieb Kaspar Brand httpd-dev.2...@velox.ch: On 22.04.2015 18:54, Jim Jagielski wrote: For me the time seems right to rip NPN out of trunk and only backport the ALPN code to 2.4. I'd be +1 for that. So, to get one step further, and since there were no