On 2/14/06, Ted Husted <[EMAIL PROTECTED]> wrote:
> OK, we're making some progress. The Cancellable code is in, and I'm
> testing the example applications again, updating the configurations as
> needed for the cancellable property. After that, it's a final pass on
> the Relesae Notes (since November)., and we should be able to roll
> each of the seven subprojects.

I'd like to fix "DOS attack, application hack" by patching
RequestUtils to ignore any parameter starting with
"multipartRequestHandler.".

  http://issues.apache.org/bugzilla/show_bug.cgi?id=38534

I don't understand your comment about there being no agreement and
moving it to 1.3.1 - no one seemed to object to this proposal. I think
Paul just wanted a more complete solution in general. Its not elegant
but it plugs the gap and I think this is the main bug left thats going
to screw up 1.3.0's quality vote.

If no one shouts in the next hour, I'm going to fix this.

Niall

> Hopefully, I can make some time  in the evenings to finish this up,
> but we're starting a new phase at work tomorrow, and I don't know how
> much time I'll have.
>
> -Ted.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to