lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <403A80EF.1080900@cissp.com> Date: Mon, 23 Feb 2004 15:38:39 -0700 From: Darwin Mecham <darwin@...sp.com> To: bugtraq@...urityfocus.com Subject: blocking gzip encoded files It has recently come to my attention that most browsers happily do Accept-encoding: gzip and streaming decompression of HTML data received with Content-encoding: gzip without asking. This has been in use since sometime in 1998. Is there a way to configure the run-of-the-mill browser to block these at the host level ? Darwin