undefined | Better HN

0 pointspreseinger3y ago0 comments

middleboxes are free to drop the body of any GET request, and generally do so

0 comments

2 comments · 1 top-level

adev_3y ago· 1 in thread

> middleboxes are free to drop the body of any GET request, and generally do so

Most middlebox will equally drop any HTTP verb which is not whitelisted.

Even the extension of WebDAV, which are 15 years old are still commonly blocked.

preseingerOP3y ago

blocking a request is fine, the request is stopped, the client gets an error

my point is that a middlebox that receives a GET request with a body may drop the body from the request and still forward the request onwards, without the body

these are categorically different outcomes

j / k navigate · click thread line to collapse