[tahoe-lafs-trac-stream] [tahoe-lafs] #992: Store Content-Type as part of directory entries

tahoe-lafs trac at tahoe-lafs.org
Thu May 17 22:01:20 UTC 2012


#992: Store Content-Type as part of directory entries
-----------------------------+--------------------------------
     Reporter:  jsgf         |      Owner:  somebody
         Type:  enhancement  |     Status:  new
     Priority:  major        |  Milestone:  undecided
    Component:  code         |    Version:  1.6.0
   Resolution:               |   Keywords:  metadata integrity
Launchpad Bug:               |
-----------------------------+--------------------------------

Comment (by davidsarah):

 Content-Type syntax is defined in
 [http://tools.ietf.org/html/rfc2045#section-5.1]. It's a bit
 overcomplicated so I suggest just restricting to printable characters
 (ASCII 0x20..0x7E), and possibly imposing a maximum length. That should be
 sufficient to prevent splitting attacks (and buffer overflow attacks
 against carelessly written parsers).

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/992#comment:6>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list