Re: GET and referer security considerations
David W. Morris (dwm@xpasc.com)
Tue, 1 Jul 1997 14:51:59 -0700 (PDT)
On Tue, 1 Jul 1997, Scott Lawrence wrote:
> The world may need a Best Current Practices RFC to advise
> application designers on how to avoid problems like the one Koen
> cites, but no HTTP server can stop them, and the specification
> should not be muddied with requirements which can neither be
> implemented nor tested.
The BCP suggestion is valid in any case, but from an HTTP perspective,
there has never been a distinction between the piece of software known as
the server and applications it may launch ... the composite is "the
server".
Dave Morris