From 56a9050dc71f515b112efb8334df00e52ba884de Mon Sep 17 00:00:00 2001 From: "dveditz@cruzio.com" Date: Tue, 26 Jun 2007 02:28:38 -0700 Subject: [PATCH] bug 381264 nix 'track' method; r=biesi, sr=sicking --- content/base/src/nsXMLHttpRequest.cpp | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/content/base/src/nsXMLHttpRequest.cpp b/content/base/src/nsXMLHttpRequest.cpp index 8865a383ea4..ba1c1114761 100644 --- a/content/base/src/nsXMLHttpRequest.cpp +++ b/content/base/src/nsXMLHttpRequest.cpp @@ -998,8 +998,10 @@ nsXMLHttpRequest::OpenRequest(const nsACString& method, NS_ENSURE_ARG(!method.IsEmpty()); NS_ENSURE_ARG(!url.IsEmpty()); - // Disallow HTTP/1.1 TRACE method (see bug 302489). - if (method.LowerCaseEqualsASCII("trace")) { + // Disallow HTTP/1.1 TRACE method (see bug 302489) + // and MS IIS equivalent TRACK (see bug 381264) + if (method.LowerCaseEqualsASCII("trace") || + method.LowerCaseEqualsASCII("track")) { return NS_ERROR_INVALID_ARG; }