Allow headers containing " to fix problem reported by doublec
parent
8a7d877ec6
commit
c28370d356
|
@ -34,7 +34,7 @@ IN: http
|
|||
|
||||
: check-header-string ( str -- str )
|
||||
#! http://en.wikipedia.org/wiki/HTTP_Header_Injection
|
||||
dup "\r\n\"" intersects?
|
||||
dup "\r\n" intersects?
|
||||
[ "Header injection attack" throw ] when ;
|
||||
|
||||
: write-header ( assoc -- )
|
||||
|
|
Loading…
Reference in New Issue