]> Cypherpunks repositories - gostls13.git/commit
net/http: switch HTTP1 to ASCII equivalents of string functions
authorRoberto Clapis <roberto@golang.org>
Wed, 7 Apr 2021 12:36:40 +0000 (14:36 +0200)
committerFilippo Valsorda <filippo@golang.org>
Mon, 10 May 2021 23:42:56 +0000 (23:42 +0000)
commit5c489514bc5e61ad9b5b07bd7d8ec65d66a0512a
tree2b936bb8bf6f8957348dcb17e424d9559c737372
parentdc50683bf7ebdfde726d710131ba05fe97e10a07
net/http: switch HTTP1 to ASCII equivalents of string functions

The current implementation uses UTF-aware functions
like strings.EqualFold and strings.ToLower.

This could, in some cases, cause http smuggling.

Change-Id: I0e76a993470a1e1b1b472f4b2859ea0a2b22ada0
Reviewed-on: https://go-review.googlesource.com/c/go/+/308009
Run-TryBot: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Go Bot <gobot@golang.org>
Trust: Roberto Clapis <roberto@golang.org>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
14 files changed:
src/go/build/deps_test.go
src/net/http/client.go
src/net/http/cookie.go
src/net/http/cookiejar/jar.go
src/net/http/cookiejar/punycode.go
src/net/http/header.go
src/net/http/http.go
src/net/http/httputil/reverseproxy.go
src/net/http/httputil/reverseproxy_test.go
src/net/http/internal/ascii/print.go [new file with mode: 0644]
src/net/http/internal/ascii/print_test.go [new file with mode: 0644]
src/net/http/request.go
src/net/http/transfer.go
src/net/http/transport.go