Re: [squid-users] ACL to match %AA

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Wed, 08 Mar 2006 12:07:06 +0100

ons 2006-03-08 klockan 12:00 +0100 skrev Stefan Bohm:
> Hello Henrik,
>
> do you have any idea, what might cause the "Forwarding loop detected"
> problem, after someone submits the strange URL containing lots of %NN chars?

What does access.log say?

>
> As I said wrote before, this can only be resolved be reloading the squid.
>
> Regards
> Stefan
>
> Henrik Nordstrom schrieb:
> > tis 2006-03-07 klockan 12:44 +0100 skrev mlists:
> >> Hi folks,
> >>
> >> is there any way to set up an urlpath_regex that matches %AA in a URL?
> >
> > Only by having the normalized form of %AA in your pattern.
> >
> >> Before feeding the URL into the ACL regex, squid seems to urldecode
> >> such fancy characters:
> >
> > Correct, as it would otherwise be trivial to bypass any pattern by
> > simply %NN encode selected parts..
> >
> > Regards
> > Henrik

Received on Wed Mar 08 2006 - 04:07:14 MST

This archive was generated by hypermail pre-2.1.9 : Sat Apr 01 2006 - 12:00:03 MST