On 2/14/06, Ted Husted <[EMAIL PROTECTED]> wrote: > OK, we're making some progress. The Cancellable code is in, and I'm > testing the example applications again, updating the configurations as > needed for the cancellable property. After that, it's a final pass on > the Relesae Notes (since November)., and we should be able to roll > each of the seven subprojects.
I'd like to fix "DOS attack, application hack" by patching RequestUtils to ignore any parameter starting with "multipartRequestHandler.". http://issues.apache.org/bugzilla/show_bug.cgi?id=38534 I don't understand your comment about there being no agreement and moving it to 1.3.1 - no one seemed to object to this proposal. I think Paul just wanted a more complete solution in general. Its not elegant but it plugs the gap and I think this is the main bug left thats going to screw up 1.3.0's quality vote. If no one shouts in the next hour, I'm going to fix this. Niall > Hopefully, I can make some time in the evenings to finish this up, > but we're starting a new phase at work tomorrow, and I don't know how > much time I'll have. > > -Ted. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]