Allow headers containing " to fix problem reported by doublec
parent
8a7d877ec6
commit
c28370d356
|
@ -34,7 +34,7 @@ IN: http
|
||||||
|
|
||||||
: check-header-string ( str -- str )
|
: check-header-string ( str -- str )
|
||||||
#! http://en.wikipedia.org/wiki/HTTP_Header_Injection
|
#! http://en.wikipedia.org/wiki/HTTP_Header_Injection
|
||||||
dup "\r\n\"" intersects?
|
dup "\r\n" intersects?
|
||||||
[ "Header injection attack" throw ] when ;
|
[ "Header injection attack" throw ] when ;
|
||||||
|
|
||||||
: write-header ( assoc -- )
|
: write-header ( assoc -- )
|
||||||
|
|
Loading…
Reference in New Issue