Re: Bug: committers can set arbitrary HTTP Headers on any file

On 8/10/07, Brian W. Fitzpatrick <fitz@red-bean.com> wrote:
> Summary: by providing a multi-line value for the svn:mime-type
> property, you can add arbitrary headers to any mod_dav_svn response
> for a file in a Subversion repository

Should we also report this to Apache HTTPD as a bug in ap_set_content_type?

--dave

-- 
David Glasser | glasser_at_davidglasser.net | http://www.davidglasser.net/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org