Bugtraq mailing list archives

blocking gzip encoded files


From: Darwin Mecham <darwin () cissp com>
Date: Mon, 23 Feb 2004 15:38:39 -0700

It has recently come to my attention that most browsers happily
do Accept-encoding: gzip and streaming decompression of
HTML data received with Content-encoding: gzip
without asking.

This has been in use since sometime in 1998.

Is there a way to configure the run-of-the-mill browser to
block these at the host level ?

Darwin



Current thread: