3 ms·

> Our policy is that anything that requires a proxy to forward an invalid Transfer-Encoding header is a vulnerability in the proxy It's great that they're fixi

> Our policy is that anything that requires a proxy to forward an invalid Transfer-Encoding header is a vulnerability in the proxy It's great that they're fixing this anyway, but that's a bad policy.

jeff-davis 6y ago
That was my initial reaction as well, but I'd like to hear some more explanation.