Hello,

I have a question regarding this new directive - HttpProtocolOptions and in
particular its parameter Unsafe.

>From https://httpd.apache.org/docs/2.4/mod/core.html:
...Due to legacy modules, applications or custom user-agents which must be
deprecated the Unsafe option has been added to revert to the legacy
behaviors.

What exactly are supported deprecated behaviors? I noticed some formats
that worked in 2.4.23 but do not work in 2.4.25 even with Unsafe.

Among others:
* Only SP is now supported as separator in request line - but it used to
work with TAB and some other white space as well. (Although more than one
SP can still be used.)
* Neither SP nor TAB are allowed between header name and colon.

Can you please confirm that this is intended behavior?

Thanks!

Best regards,
Pavel Reichl

Reply via email to