]> Cypherpunks repositories - gostls13.git/commit
net/http: use ASCII space trimming throughout
authorFilippo Valsorda <filippo@golang.org>
Fri, 1 May 2020 05:14:04 +0000 (01:14 -0400)
committerFilippo Valsorda <filippo@golang.org>
Wed, 6 May 2020 16:25:52 +0000 (16:25 +0000)
commit21898524f66c075d7cfb64a38f17684140e57675
treec67d606c88de9c6c888fd2ea059c2bc4ebcd7e89
parentd5734d4f2dd1168dc3df94f2b9912299aea0c0ac
net/http: use ASCII space trimming throughout

Security hardening against HTTP request smuggling. Thank you to ZeddYu
for reporting this issue.

Change-Id: I98bd9f8ffe58360fc3bca9dc5d9a106773e55373
Reviewed-on: https://go-review.googlesource.com/c/go/+/231419
Reviewed-by: Katie Hockman <katie@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
src/net/http/cgi/host.go
src/net/http/cookie.go
src/net/http/fs.go
src/net/http/httptest/recorder.go
src/net/http/httputil/reverseproxy.go
src/net/http/transfer.go