2831. [security] Do not attempt to validate or cache

out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
This commit is contained in:
Evan Hunt
2010-01-07 16:48:23 +00:00
parent 4715754ba9
commit 597642c0ba
9 changed files with 70 additions and 31 deletions

View File

@@ -12,9 +12,10 @@
; OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
; PERFORMANCE OF THIS SOFTWARE.
; $Id: example.db.in,v 1.2 2009/11/17 23:55:18 marka Exp $
; $Id: example.db.in,v 1.3 2010/01/07 16:48:23 each Exp $
$TTL 30
$ORIGIN example.
@ IN SOA mname1. . (
2009110300 ; serial
20 ; refresh (20 seconds)
@@ -26,3 +27,5 @@ $TTL 30
MX 10 mail
ns2 A 10.53.0.2
mail A 10.0.0.2
bad CNAME nice.good.
worse A 6.6.6.6