on incorrect multi-byte sequences (possibly refers to bug SSPCPP-195)

[Cantor, Scott]

On 8/29/11 10:44 AM, "Roberto Benedetti" <r.benedetti at cineca.it> wrote:
>
>does it mean that version 2.3.1 is affected while 2.2.x (with x>1) and
>2.4.x versions are not?

The original bug fix in 2.2 was extended to deal with cookies and other
headers with version 2.4. Unless the bad data is in a cookie, there's
nothing different between 2.3 and the code now.

-- Scott