On 01/27/2013 08:07 AM, Erik Zachte wrote:
The code to change existing tabs into some less obnoxious character is dead trivial, hardly any overhead. At worst one field will then be affected, not the whole record, which makes it easier to spot and debug the anomaly when it happens.
Scanning an input record for tabs and raising a counter is also very efficient. Sending one alert hourly based on this counter should make us aware soon enough when this issue needs follow-up, yet without causing bottle necks.
Doing both of those would be pretty robust. However, if that isn't workable, a simple option is just to strip tab characters before Varnish/Squid/etc. writes the line.
That means downstream code doesn't have to do anything special, and it shouldn't affect many actual requests.
Matt Flaschen