RE: [WEB SECURITY] Re: HTTP Parameter Pollution

["Martin O'Neal" <martin.oneal () corsaire com>]

> 2. It would be better if an RFC or similar states how to treat them.

I would disagree with this.  This isn't a standard thing really; it is
perfectly valid for an application to expect zero/one/infinity
parameters; the issue only arises when the application does not handle a
mismatch between expectation and actuality...

Martin...