Re: The case of HTTP response splitting protection in PHP
| From: | Pierre Joye | Date: | Fri, 03 Feb 2012 22:22:01 +0000 |
| Subject: | Re: The case of HTTP response splitting protection in PHP | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57670@lists.php.net to get a copy of this message | ||
On Fri, Feb 3, 2012 at 10:37 PM, Reindl Harald <h.reindl@thelounge.net> wrote:
>
>
> Am 03.02.2012 21:44, schrieb Ángel González:
>>> If you or anyone else find any problem, please report a bug; otherwise
>>> I'll merge to 5.3 and 5.4 once 5.4 is out of code freeze.
>>>
>> As it's a security patch and of small scope, I would consider it for
>> 5.4. Stas, David?
>
> as it is SECURITY relevant it has to be considered NOW meaning 5.3 and not
> sometimes in the future!
Point is to apply well tested and approved and reviewed fixes to 5.3
or 5.4. Not blindly apply something only because it is related to a
security issue.
PS: We are not blind so please use lower case only.
--
Pierre
@pierrejoye | http://blog.thepimp.net | http://www.libgd.org