[tahoe-lafs-trac-stream] [tahoe-lafs] #992: Store Content-Type as part of directory entries
tahoe-lafs
trac at tahoe-lafs.org
Thu May 17 22:01:20 UTC 2012
#992: Store Content-Type as part of directory entries
-----------------------------+--------------------------------
Reporter: jsgf | Owner: somebody
Type: enhancement | Status: new
Priority: major | Milestone: undecided
Component: code | Version: 1.6.0
Resolution: | Keywords: metadata integrity
Launchpad Bug: |
-----------------------------+--------------------------------
Comment (by davidsarah):
Content-Type syntax is defined in
[http://tools.ietf.org/html/rfc2045#section-5.1]. It's a bit
overcomplicated so I suggest just restricting to printable characters
(ASCII 0x20..0x7E), and possibly imposing a maximum length. That should be
sufficient to prevent splitting attacks (and buffer overflow attacks
against carelessly written parsers).
--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/992#comment:6>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage
More information about the tahoe-lafs-trac-stream
mailing list