Plugging the hole

George Phillips <phillips@cs.ubc.ca>
Date: 13 Aug 93 15:40 -0700
From: George Phillips <phillips@cs.ubc.ca>
To: www-talk@nxoc01.cern.ch
In-reply-to: <19059.745280424@moose.cs.indiana.edu>
Message-id: <6130*phillips@cs.ubc.ca>
Subject: Plugging the hole
Status: RO
Marc VanH has summed up the options pretty well.  I think it
should be noted that the SLACK fix is not only tightens security
but it is a bug fix as well.  Allowing newlines, carriage returns
or tabs in gopher selectors is going outside the gopher protocol.
If going outside the protocol isn't a bug, I don't know what is.

			-- George