Hello,
Today we can query cache manager in two ways:
1. with cache_object:// URL scheme
2. with an HTTP request having the 'squid-internal-mgr' path prefix.
I guess that when (2) was initially added at e37bd29, its implementation
was somewhat incomplete compared to the old cache_object scheme (e.g.,
it lacked authentication) and both methods existed. Since then, however,
(2) has been improved and it should be equivalent to (1) by now. If so,
can we completely remove the non-standard cache_object scheme support
from Squid? This would simplify request forwarding logic, including code
paths where the existing code complexity may result in vulnerability issues.
Thanks,
Eduard.
_______________________________________________
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev
