From owner-freebsd-apache@FreeBSD.ORG Mon Nov 28 14:41:27 2011 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id ED03C106566B for ; Mon, 28 Nov 2011 14:41:27 +0000 (UTC) (envelope-from miwi.freebsd@googlemail.com) Received: from mail-yx0-f182.google.com (mail-yx0-f182.google.com [209.85.213.182]) by mx1.freebsd.org (Postfix) with ESMTP id AD63A8FC12 for ; Mon, 28 Nov 2011 14:41:27 +0000 (UTC) Received: by yenq9 with SMTP id q9so7564739yen.13 for ; Mon, 28 Nov 2011 06:41:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=sender:message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; bh=mNGBKSz2zuqyB2RKNCgnMFE1whaPW+pROR7iEcoTqi4=; b=KxLA3V6BH8RbkR4WjF93THf1CwBW64XUU9r7LRL7U366GPJooHve7j9724VlW8T0Bk XNZkj61m4ivpTr9v2RP8tRI4j+7bmMNiWPMKj3dAHatZQJo5cWu0CpG1BpNhv1DMrDGj vh+A9d5gsH3qz5agYts4hog29NfCFRwPuvqZM= Received: by 10.50.135.40 with SMTP id pp8mr51046351igb.1.1322489640876; Mon, 28 Nov 2011 06:14:00 -0800 (PST) Received: from yakim.homeunix.com ([175.143.228.155]) by mx.google.com with ESMTPS id eh34sm46348402ibb.5.2011.11.28.06.13.58 (version=SSLv3 cipher=OTHER); Mon, 28 Nov 2011 06:14:00 -0800 (PST) Sender: Martin Wilke Message-ID: <4ED4077D.4080308@gmail.com> Date: Mon, 28 Nov 2011 22:13:17 +0000 From: Martin Wilke User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:8.0) Gecko/20111110 Thunderbird/8.0 MIME-Version: 1.0 To: apache@FreeBSD.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Mon, 28 Nov 2011 16:39:03 +0000 Cc: Subject: further proxy/rewrite URL validation security issue X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Nov 2011 14:41:28 -0000 Hoi, can someone please have a look here, http://marc.info/?l=apache-httpd-dev&m=132205829523882&w=2 - martin