diff options
| author | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2015-06-06 18:07:00 +0900 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2015-06-24 23:44:42 +0200 |
| commit | ddb106d7f62cd6151461f95bf489342822f0dbf5 (patch) | |
| tree | 55b2e258a682194c0386783d3b09661844d03c17 /lib/socks.c | |
| parent | 77044b53f7dc6e1c5c90a8f8bc17847adccdaaaa (diff) | |
http2: Harden header validation for curl_pushheader_byname
Since we do prefix match using given header by application code
against header name pair in format "NAME:VALUE", and VALUE part can
contain ":", we have to careful about existence of ":" in header
parameter. ":" should be allowed to match HTTP/2 pseudo-header field,
and other use of ":" in header must be treated as error, and
curl_pushheader_byname should return NULL. This commit implements
this behaviour.
Diffstat (limited to 'lib/socks.c')
0 files changed, 0 insertions, 0 deletions