Re: The case of HTTP response splitting protection in PHP
| From: | Ferenc Kovacs | Date: | Fri, 03 Feb 2012 21:52:02 +0000 |
| Subject: | Re: The case of HTTP response splitting protection in PHP | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57667@lists.php.net to get a copy of this message | ||
On Fri, Feb 3, 2012 at 10:37 PM, Reindl Harald <h.reindl@thelounge.net>wrote:
>
>
> Am 03.02.2012 21:44, schrieb Ángel González:
> >> If you or anyone else find any problem, please report a bug; otherwise
> >> I'll merge to 5.3 and 5.4 once 5.4 is out of code freeze.
> >>
> > As it's a security patch and of small scope, I would consider it for
> > 5.4. Stas, David?
>
> as it is SECURITY relevant it has to be considered NOW meaning 5.3 and not
> sometimes in the future!
>
>
of course it will be included in 5.3
5.4 was only mentioned explicitly, because it is under commit freeze and
only commits approved by the RMs allowed to be included.
in this case I think they will approve this obviously.
--
Ferenc Kovács
@Tyr43l - http://tyrael.hu