tree db32eaa2548697679ce17255e7e242b069850fbc
parent 2e9506d7717ee0a17a044a334f6b1cddf46a00a6
author Willy Tarreau <w@1wt.eu> 1325976853 +0100
committer Willy Tarreau <w@1wt.eu> 1325976920 +0100
encoding latin1

MEDIUM: http: block non-ASCII characters in URIs by default

These ones are invalid and blocked unless "option accept-invalid-http-request"
is specified in the frontend. In any case, the faulty request is logged.

Note that some of the remaining invalid chars are still not checked against,
those are the invalid ones between 32 and 127 :

    34 ('"'), 60 ('<'), 62 ('>'), 92 ('\'), 94 ('^'),
    96 ('`'), 123 ('{'), 124 ('|'), 125 ('}')

Using a lookup table might be better at some point.