Feature #1352: Patch: Added missing TRACK method to lib/net/http.rb

• Status: Rejected
• Assignee: aamine (Minero Aoki)

[dapatil (Darshan Patil)]

=begin
Added TRACK method to the http library.

The TRACK method allows connections from the client to the server to be traced and debugged. When the TRACK method is used, the Web server echoes back information to the client that is not filtered and not modified.

Microsoft IIS Web servers use the TRACK method, which is an alias of TRACE.
=end

[marcandre (Marc-Andre Lafortune)]

• Category set to lib
• Assignee set to aamine (Minero Aoki)

=begin

=end

[naruse (Yui NARUSE)]

• Status changed from Open to Rejected

=begin
TRACK is only in IIS and source of vulnerability.
We can't add such method.

http://www.kb.cert.org/vuls/id/288308
http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=20419
=end