New middleware: PadForSecurity
Reported by Gaius Centus Novus | June 3rd, 2009 @ 05:05 PM
I've added a PadForSecurity middleware. The use case is for developers who are generating content that will eventually be encrypted before being sent out. Some encryption algorithms are weakened by any static subset of the plaintext appearing at a block boundary. It pads spaces (configurable) onto the beginning or end of responses that won't be corrupted by the padding.
Links:
- the branch on GitHub
- the relevant commit
Comments and changes to this ticket
-
Gaius Centus Novus June 3rd, 2009 @ 05:07 PM
Just as I was typing this up I realized a problem: XML doesn't want extra spaces at the beginning. Any suggestions on a clean way to put them right before
<bodyor<htmlwithout binding too closely to the MIME type?
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Gaius Centus Novus