Re: [squid-users] What squid should do with RFC non-compliant response header?

2017-04-05 Thread Eliezer Croitoru
Thanks for the reponse. Actually browsers ignore the header as a response header and do not show it at all. (at least firefox) Technically I would expect squid to pass it but it's might have the potential for a CVE in some casese. Eliezer Eliezer Croitoru Linux System Administrator Mobile:

Re: [squid-users] What squid should do with RFC non-compliant response header?

2017-04-05 Thread L A Walsh
Eliezer Croitoru wrote: Hi List, I noticed that there are broken services out-there which uses non RFC compliance response header such as the case of space, for example: "Content Type: hola amigos" HmmmApril 1?... Seriously -- what would a user's browser do? Probably depends on brows

[squid-users] What squid should do with RFC non-compliant response header?

2017-04-05 Thread Eliezer Croitoru
Hi List, I noticed that there are broken services out-there which uses non RFC compliance response header such as the case of space, for example: "Content Type: hola amigos" Compared to: "Content-Type: Hola amigos" Leaving aside if the content type is valid and is indeed mime one and looking

Re: [squid-users] Squid Authentication if URL is on a Blacklist from SquidGuard

2017-04-05 Thread CrossfireAUT
/If you have such a thing as AD and the ability to push Group Policy to the users there is no need to avoid authentication./ I have a running AD on Ubuntu 16.04 with samba4. /Perhapse the client is actually asking to get away from lots of annoying popups the browsers are forcing on them? if that