Hi,

On Sun, 08 Aug 2004 00:07:24 +0200, Roy T. Fielding wrote:
...
> An HTTP request with no content-length and no tranfer-encoding has no body,
> period:

OK. Now just a question whether to not to implement HTTP-request sanity check
as is implemented in squid clientCheckContentLength():

        PUT+POST:
                require a request entity: HTTP_LENGTH_REQUIRED = 411
        GET+HEAD:
                forbid a request entity if !$request_entities: HTTP_LENGTH_REQUIRED = 
411

        configurable $request_entities:
                allow GET/HEAD requests with request entities, even if such
                entites are "undefined" in the HTTP specification.

Unfortunately there is no HTTP specification which methods
MUST/MUST NOT/etc. (RFC 2119) include HTTP request bodies.


Lace

-- 
Jan Kratochvil; Captive: free r/w NTFS Filesystem; http://www.jankratochvil.net/

Reply via email to