[Webkit-unassigned] [Bug 66909] XMLHttpRequest method/header validation is not available for other untrusted HTTP requests.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Aug 25 05:46:13 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=66909





--- Comment #7 from Bill Budge <bbudge at gmail.com>  2011-08-25 05:46:12 PST ---
I would prefer to use the HashSet implementation - it's much slicker than using char arrays. If you don't feel that calling initializeXMLHttpRequestStaticData (with it's lock/unlock) for every header field check is a performance concern, I will do that. The cost could be reduced by adding a public static method to perform this initialization, but I felt that design was more error prone.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list