Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

Update comment to be recent

  • Loading branch information...
commit 0bf160102d2e0832d9bb40c061cd0420aa18a0c0 1 parent e0c1f86
@dhruvbird authored
Showing with 2 additions and 7 deletions.
  1. +2 −7 src/http-server.js
View
9 src/http-server.js
@@ -45,18 +45,13 @@ function HTTPServer(port, host, stat_func, bosh_request_handler, http_error_hand
function parse_request(buffers) {
var valid_request = true;
- // We wrap every request in a <DUMMY_randomint> request
- // </DUMMY_randomint> tag. This prevents the user from hacking
+ // We wrap every request in a <DUMMY> request
+ // </DUMMY> tag. This prevents the user from hacking
// the parser's stream by sending in a request like: <body>
// <blah/> </body> <body>
//
// If the user sent a reuqest like <body> <blah/> <DUMMY> or
// any such thing, then the parser will be able to detect it.
- //
- // We use a random (upto 7 digit) integer so that the attaker
- // can not "guess" the name of the tag we are using to delimit
- // the request.
- //
var i;
bosh_request_parser.parse('<DUMMY>');
Please sign in to comment.
Something went wrong with that request. Please try again.