[squid-dev] Drop cache_object protocol support
Eduard Bagdasaryan
eduard.bagdasaryan at measurement-factory.com
Tue Jan 24 17:22:40 UTC 2023
Hello,
Today we can query cache manager in two ways:
1. with cache_object:// URL scheme
2. with an HTTP request having the 'squid-internal-mgr' path prefix.
I guess that when (2) was initially added at e37bd29, its implementation
was somewhat incomplete compared to the old cache_object scheme (e.g.,
it lacked authentication) and both methods existed. Since then, however,
(2) has been improved and it should be equivalent to (1) by now. If so,
can we completely remove the non-standard cache_object scheme support
from Squid? This would simplify request forwarding logic, including code
paths where the existing code complexity may result in vulnerability issues.
Thanks,
Eduard.
More information about the squid-dev
mailing list