Feature #1352

Patch: Added missing TRACK method to lib/net/http.rb

Added by Darshan Patil almost 3 years ago. Updated 10 months ago.

[ruby-core:23117]
Status:Rejected Start date:04/05/2009
Priority:Normal Due date:
Assignee:Minero Aoki % Done:

0%
Category:lib
Target version:-

Description

Added TRACK method to the http library.

The TRACK method allows connections from the client to the server to be traced and debugged. When the TRACK method is used, the Web server echoes back information to the client that is not filtered and not modified.

Microsoft IIS Web servers use the TRACK method, which is an alias of TRACE.

add_http_track.diff (790 Bytes) Darshan Patil, 04/05/2009 12:50 am

Related issues

duplicates ruby-trunk - Feature #1358: net/http has no TRACK method - here's a patch Rejected 04/06/2009

History

#1
Updated by Marc-Andre Lafortune over 2 years ago

  • Category set to lib
  • Assignee set to Minero Aoki

#2
Updated by Yui NARUSE almost 2 years ago

  • Status changed from Open to Rejected
TRACK is only in IIS and source of vulnerability.
We can't add such method.

http://www.kb.cert.org/vuls/id/288308
http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=20419

Also available in: Atom PDF