Changeset 1766
- Timestamp:
- 13/07/12 14:35:12 (10 years ago)
- Location:
- draft-ietf-httpbis/latest
- Files:
-
- 2 edited
Legend:
- Unmodified
- Added
- Removed
-
draft-ietf-httpbis/latest/p1-messaging.html
r1765 r1766 1443 1443 an HTTP payload, recipients <em class="bcp14">SHOULD</em> anticipate potentially large decimal numerals and prevent parsing errors due to integer conversion overflows (<a href="#attack.protocol.element.size.overflows" title="Protocol Element Size Overflows">Section 8.6</a>). 1444 1444 </p> 1445 <p id="rfc.section.3.3.2.p.7">If a message is received that has multiple Content-Length header fields (<a href="#header.content-length" id="rfc.xref.header.content-length.1" title="Content-Length">Section 3.3.2</a>) with field-values consisting of the same decimal value, or a single Content-Length header field with a field value containing 1446 a list of identical decimal values (e.g., "Content-Length: 42, 42"), indicating that duplicate Content-Length header fields 1447 have been generated or combined by an upstream message processor, then the recipient <em class="bcp14">MUST</em> either reject the message as invalid or replace the duplicated field-values with a single valid Content-Length field containing 1445 <p id="rfc.section.3.3.2.p.7">If a message is received that has multiple Content-Length header fields with field-values consisting of the same decimal value, 1446 or a single Content-Length header field with a field value containing a list of identical decimal values (e.g., "Content-Length: 1447 42, 42"), indicating that duplicate Content-Length header fields have been generated or combined by an upstream message processor, 1448 then the recipient <em class="bcp14">MUST</em> either reject the message as invalid or replace the duplicated field-values with a single valid Content-Length field containing 1448 1449 that decimal value prior to determining the message body length. 1449 1450 </p> … … 2296 2297 <td class="left">http</td> 2297 2298 <td class="left">standard</td> 2298 <td class="left"> <a href="#header.content-length" id="rfc.xref.header.content-length. 2" title="Content-Length">Section 3.3.2</a>2299 <td class="left"> <a href="#header.content-length" id="rfc.xref.header.content-length.1" title="Content-Length">Section 3.3.2</a> 2299 2300 </td> 2300 2301 </tr> … … 3588 3589 <li>connection <a href="#rfc.iref.c.2"><b>2.1</b></a></li> 3589 3590 <li>Connection header field <a href="#rfc.xref.header.connection.1">2.4</a>, <a href="#rfc.xref.header.connection.2">2.7</a>, <a href="#rfc.xref.header.connection.3">3.2</a>, <a href="#rfc.xref.header.connection.4">4.3</a>, <a href="#rfc.xref.header.connection.5">5.6</a>, <a href="#rfc.xref.header.connection.6">5.6.1</a>, <a href="#rfc.iref.c.13"><b>6.1</b></a>, <a href="#rfc.xref.header.connection.7">6.3.2</a>, <a href="#rfc.xref.header.connection.8">6.5</a>, <a href="#rfc.xref.header.connection.9">7.1</a>, <a href="#rfc.xref.header.connection.10">7.1</a>, <a href="#rfc.xref.header.connection.11">A.2</a></li> 3590 <li>Content-Length header field <a href="#rfc.iref.c.6"><b>3.3.2</b></a>, <a href="#rfc.xref.header.content-length.1"> 3.3.2</a>, <a href="#rfc.xref.header.content-length.2">7.1</a></li>3591 <li>Content-Length header field <a href="#rfc.iref.c.6"><b>3.3.2</b></a>, <a href="#rfc.xref.header.content-length.1">7.1</a></li> 3591 3592 </ul> 3592 3593 </li> … … 3705 3706 <ul> 3706 3707 <li>Connection <a href="#rfc.xref.header.connection.1">2.4</a>, <a href="#rfc.xref.header.connection.2">2.7</a>, <a href="#rfc.xref.header.connection.3">3.2</a>, <a href="#rfc.xref.header.connection.4">4.3</a>, <a href="#rfc.xref.header.connection.5">5.6</a>, <a href="#rfc.xref.header.connection.6">5.6.1</a>, <a href="#rfc.iref.h.12"><b>6.1</b></a>, <a href="#rfc.xref.header.connection.7">6.3.2</a>, <a href="#rfc.xref.header.connection.8">6.5</a>, <a href="#rfc.xref.header.connection.9">7.1</a>, <a href="#rfc.xref.header.connection.10">7.1</a>, <a href="#rfc.xref.header.connection.11">A.2</a></li> 3707 <li>Content-Length <a href="#rfc.iref.h.7"><b>3.3.2</b></a>, <a href="#rfc.xref.header.content-length.1"> 3.3.2</a>, <a href="#rfc.xref.header.content-length.2">7.1</a></li>3708 <li>Content-Length <a href="#rfc.iref.h.7"><b>3.3.2</b></a>, <a href="#rfc.xref.header.content-length.1">7.1</a></li> 3708 3709 <li>Host <a href="#rfc.xref.header.host.1">5.3</a>, <a href="#rfc.iref.h.11"><b>5.4</b></a>, <a href="#rfc.xref.header.host.2">7.1</a>, <a href="#rfc.xref.header.host.3">A.1.1</a></li> 3709 3710 <li>TE <a href="#rfc.xref.header.te.1">4</a>, <a href="#rfc.xref.header.te.2">4.1</a>, <a href="#rfc.iref.h.8"><b>4.3</b></a>, <a href="#rfc.xref.header.te.3">4.3.1</a>, <a href="#rfc.xref.header.te.4">7.1</a></li> -
draft-ietf-httpbis/latest/p1-messaging.xml
r1765 r1766 1667 1667 <t> 1668 1668 If a message is received that has multiple Content-Length header fields 1669 (<xref target="header.content-length"/>) with field-values consisting 1670 of the same decimal value, or a single Content-Length header field with 1671 a field value containing a list of identical decimal values (e.g., 1672 "Content-Length: 42, 42"), indicating that duplicate Content-Length 1673 header fields have been generated or combined by an upstream message 1674 processor, then the recipient &MUST; either reject the message as invalid 1675 or replace the duplicated field-values with a single valid Content-Length 1676 field containing that decimal value prior to determining the message body 1677 length. 1669 with field-values consisting of the same decimal value, or a single 1670 Content-Length header field with a field value containing a list of 1671 identical decimal values (e.g., "Content-Length: 42, 42"), indicating that 1672 duplicate Content-Length header fields have been generated or combined by an 1673 upstream message processor, then the recipient &MUST; either reject the 1674 message as invalid or replace the duplicated field-values with a single 1675 valid Content-Length field containing that decimal value prior to 1676 determining the message body length. 1678 1677 </t> 1679 1678 <x:note>
Note: See TracChangeset
for help on using the changeset viewer.