Maik Mueller wrote:

Putting arbitrary 8bit characters into headers makes me feel a bit uneasy
but I couldn't find a quote that this is forbidden.
Looking at this further, the header value is defined as TEXT. TEXT is defined as OCTETs that are not control characters. An OCTET is an 8 bit character. As far as I can see it should be up to the entity putting data into the header to make sure it does not contain control characters. In your case, base64 would thus be safe.

What do you think about my proposal to add the "E" option with the described
behavior to the Header and RequestHeader directive?
Keeping in mind that HTTP 1.0 still warns:

However, folding of header lines is not expected by some
applications, and should not be generated by HTTP/1.0 applications.
HTTP 1.0 is obsolete - Apache follows HTTP/1.1, defined in RFC2616.

Regards,
Graham
--
-----------------------------------------
[EMAIL PROTECTED]		"There's a moon
					over Bourbon Street
						tonight..."

Reply via email to