]> Cypherpunks repositories - gostls13.git/commit
net/http/cgi: accept INCLUDED as protocol for server side includes
authorPeter Beard <musicmandanceman@gmail.com>
Tue, 28 Oct 2025 16:26:26 +0000 (10:26 -0600)
committerGopher Robot <gobot@golang.org>
Thu, 13 Nov 2025 21:44:03 +0000 (13:44 -0800)
commit129d0cb543e1e15cdea706dd7230ee90c8d54446
tree016cadb2b2254323bf32045f80307ae8463fec27
parent77c5130100ac1b29bb2e04d0f5f99e200136c0af
net/http/cgi: accept INCLUDED as protocol for server side includes

The existing protocol check for fcgi/cgi requests did not properly
account for Apache SSI (Server-Side Includes) SERVER_PROTOCOL value of
INCLUDED.

Added check for well-known INCLUDED value for proper implementation of
the CGI Spec as specified in RFC 3875 - section 4.1.16.

The SERVER_PROTOCOL section of the specification is outlined at
https://www.rfc-editor.org/rfc/rfc3875.html#section-4.1.16

Fixes #70416

Change-Id: I129e606147e16d1daefb49ed6c13a561a88ddeb6
Reviewed-on: https://go-review.googlesource.com/c/go/+/715680
Reviewed-by: Damien Neil <dneil@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Junyang Shao <shaojunyang@google.com>
Reviewed-by: Sean Liao <sean@liao.dev>
Auto-Submit: Sean Liao <sean@liao.dev>
src/net/http/cgi/child.go
src/net/http/cgi/child_test.go