blocking gzip encoded files

From: Darwin Mecham (darwin_at_cissp.com)
Date: 02/23/04

  • Next message: Advisories: "Mac OS X pppd format string vulnerability" 
    Date: Mon, 23 Feb 2004 15:38:39 -0700
To: bugtraq@securityfocus.com

    It has recently come to my attention that most browsers happily
    do Accept-encoding: gzip and streaming decompression of
    HTML data received with Content-encoding: gzip
     without asking.

    This has been in use since sometime in 1998.

    Is there a way to configure the run-of-the-mill browser to
    block these at the host level ?

    Darwin

  • Next message: Advisories: "Mac OS X pppd format string vulnerability"

    Relevant Pages