Full Disclosure mailing list archives

Re: HTTP 404 - Content-Type: image/gif


From: Shaun <shaun () shaunc com>
Date: Mon, 20 Nov 2006 11:48:09 -0600

On Mon, 20 Nov 2006 13:00:00 -0300
"Joshua Tagnore" <joshua.tagnore () gmail com> wrote:

mafo:/home/joshua/$ nc XXXXX 80 -v -v
GET http://www.XXXXXX.com/YYYYYY HTTP/1.0


HTTP/1.0 404 Not Found
Date: Fri, 17 Nov 2006 13:40:47 GMT
Content-Length: 0
Content-Type: image/gif
Server: Apache/2.0.54 (Unix)

By chance, does this server belong to an image host like imageshack or
flickr?

If the majority of their 404s are requests for gif/jpg/png, resulting from
<img> tags on remote sites, it might make sense for their 404s to return
a zero-length image for everything but .html. That way the browsers are
at least getting a reasonable content-type (I'm not suggesting that
image/gif is the best content-type for a missing .png, for instance; but
it's marginally better than text/html).

-s

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: