From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=192.55.52.43; helo=mga05.intel.com; envelope-from=siyuan.fu@intel.com; receiver=edk2-devel@lists.01.org Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id 135EB203BA4EB for ; Tue, 22 May 2018 22:44:04 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga007.fm.intel.com ([10.253.24.52]) by fmsmga105.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 22 May 2018 22:44:03 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.49,432,1520924400"; d="scan'208";a="41496058" Received: from fmsmsx105.amr.corp.intel.com ([10.18.124.203]) by fmsmga007.fm.intel.com with ESMTP; 22 May 2018 22:44:03 -0700 Received: from fmsmsx114.amr.corp.intel.com (10.18.116.8) by FMSMSX105.amr.corp.intel.com (10.18.124.203) with Microsoft SMTP Server (TLS) id 14.3.319.2; Tue, 22 May 2018 22:44:03 -0700 Received: from shsmsx104.ccr.corp.intel.com (10.239.4.70) by FMSMSX114.amr.corp.intel.com (10.18.116.8) with Microsoft SMTP Server (TLS) id 14.3.319.2; Tue, 22 May 2018 22:44:02 -0700 Received: from shsmsx103.ccr.corp.intel.com ([169.254.4.210]) by SHSMSX104.ccr.corp.intel.com ([169.254.5.240]) with mapi id 14.03.0319.002; Wed, 23 May 2018 13:44:01 +0800 From: "Fu, Siyuan" To: Sivaraman Nainar , "edk2-devel@lists.01.org" Thread-Topic: reg: EDK2 - HTTP Boot Image Validation Thread-Index: AdPuiPtKZoFx+AjgT3urlqJqNYkCywDztnig Date: Wed, 23 May 2018 05:44:00 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ctpclassification: CTP_NT x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiMWFmN2Y0OTMtNDVmZi00N2Q4LTk4ZTYtMDQ4ZmY3ZDM5OTQxIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoicHN1SUk2SlgxQlZGTUhRSGppXC9DZmJSc090K1wvZTlvWGNoZVBFWTh3eUlQN0RTWnEzTTZiZytUOHZXRlZid29XIn0= dlp-product: dlpe-windows dlp-version: 11.0.200.100 dlp-reaction: no-action x-originating-ip: [10.239.127.40] MIME-Version: 1.0 Subject: Re: reg: EDK2 - HTTP Boot Image Validation X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 May 2018 05:44:04 -0000 Content-Language: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, Siva What do you mean by "skip the validation of image types"? Do you want to sk= ip the "Content-type" HTTP header check, or name extension check, or both o= f them? BestRegards Fu Siyuan > -----Original Message----- > From: edk2-devel [mailto:edk2-devel-bounces@lists.01.org] On Behalf Of > Sivaraman Nainar > Sent: Friday, May 18, 2018 5:17 PM > To: edk2-devel@lists.01.org > Subject: [edk2] reg: EDK2 - HTTP Boot Image Validation >=20 > Hello all, > When HTTP Boot performed the code checking if the Image type as EFI ISO > and IMG. If not the boot not when the content type is as > "Content-type: text/plain". > https://github.com/tianocore/edk2/blob/master/NetworkPkg/HttpBootDxe/Http= B > ootSupport.c (HttpBootCheckImageType()) >=20 > But as per RFC it described below. > https://tools.ietf.org/html/rfc2616#section-7.2.1: > "If and only if the media type is not given by a Content-Type field, the > recipient MAY attempt to guess the media type via inspection of its > content and/or the name extension(s) of the URI used to identify the > resource." > Can you please comment if this need to be addressed such a way we can ski= p > the validation of image types. > -Siva > _______________________________________________ > edk2-devel mailing list > edk2-devel@lists.01.org > https://lists.01.org/mailman/listinfo/edk2-devel