This project is closed and read-only.
Actions
Feature #1352
closedPatch: Added missing TRACK method to lib/net/http.rb
Feature #1352:
Patch: Added missing TRACK method to lib/net/http.rb
Status:
Rejected
Assignee:
Description
=begin
Added TRACK method to the http library.
The TRACK method allows connections from the client to the server to be traced and debugged. When the TRACK method is used, the Web server echoes back information to the client that is not filtered and not modified.
Microsoft IIS Web servers use the TRACK method, which is an alias of TRACE.
=end
Files
Updated by marcandre (Marc-Andre Lafortune) about 17 years ago
- Category set to lib
- Assignee set to aamine (Minero Aoki)
=begin
=end
Updated by naruse (Yui NARUSE) over 16 years ago
- Status changed from Open to Rejected
=begin
TRACK is only in IIS and source of vulnerability.
We can't add such method.
http://www.kb.cert.org/vuls/id/288308
http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=20419
=end
Actions