dropContentLengthGet (v 0.7 beta)

1.) Description

DropContentLengthGet is a small ISAPI filter that block the "Microsoft IIS/5 bogus Content-length" bug. For more information about this subject, have a look at Security focus.

2.) How it works

DropContentLengthGet uses the "onPreProcHeader" event from ISAPI, so that it can delete the "Content-Length" header before IIS handles it. With this version, the header is deleted only when the "GET" method is used.

3.) Binaries and source code

dropContentLengthGet.dll : the filter
dropContentLengthGet.src.zip : Visual C++ source code

For detailed comments on source code, have a look to the source code explanation page.

4.) Notes

I installed this filter on a production server which has an average load and all is fine.
Please, email at dropContentLengthGet@firstcodings.net to send me any comments, feedbacks and recommandations.