rousskov at measurement-factory.com
Thu Oct 29 19:52:48 UTC 2020
On 10/29/20 7:41 AM, Amos Jeffries wrote:
> The latest Squid have AnyP::Uri::Encode() whic uses a caller provided
Just to avoid misunderstanding: AnyP::Uri::Encode() uses a
caller-provided buffer as _input_. So does rfc1738*_escape(), of course.
That kind of input is unavoidable and is not really the issue that
prompted my earlier comments about rfc1738_do_escape() dangers.
The primary in-scope problem with rfc1738*_escape() is the _output_
interface. If those functions cannot be completely removed, they should
return an SBuf. The exact best input interface will depend on the
callers, but it will always remain a "caller provided buffer".
More information about the squid-dev