summaryrefslogtreecommitdiff
path: root/usr.bin/script
diff options
context:
space:
mode:
authorIngo Schwarze <schwarze@cvs.openbsd.org>2014-07-21 15:44:23 +0000
committerIngo Schwarze <schwarze@cvs.openbsd.org>2014-07-21 15:44:23 +0000
commit353e4422b301ecf3fe6c2a5b8219f3c9f5183425 (patch)
treedd2c96a923f2aa3c8887c5803cbd0e11abbd4b88 /usr.bin/script
parent1a10869a061e74df680712b6132874c15cc1974f (diff)
Kristaps points out that the current HTTP/1.1 draft standard (RFC
2616) requires the Location: response-header field to be an absolute URI (14.30), and only the most recent proposed standard (RFC 7231), which is barely a month old, allows a relative Location: (7.1.2). While most modern browsers appear to support relative Location: headers, some may not, and it's maybe a bit early to rely on relative Location: headers. I'm not going back to the HTTP_HOST or SERVER_NAME CGI variables, though. While some CGI programs certainly require those, in which case both the CGI programmer and the web server admin have to be very careful to keep the system secure and reliable, man.cgi(8) does not really need them. We always know at compile time which domain we are running for, and for man.cgi(8), security and reliability are definitely much more important than flexibility. So make HTTP_HOST a compile-time definition for now.
Diffstat (limited to 'usr.bin/script')
0 files changed, 0 insertions, 0 deletions