]> Cypherpunks repositories - gostls13.git/commit
projects / gostls13.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 7d232ab) | patch
net/http/cgi: reject invalid header names
authorFilippo Valsorda <filippo@golang.org>
Tue, 5 May 2020 04:11:00 +0000 (00:11 -0400)
committerFilippo Valsorda <filippo@golang.org>
Wed, 6 May 2020 17:06:02 +0000 (17:06 +0000)
commite538b7e931c209706c3e8c1b0c2d53dab651b965
treeac074b3cee96513cf3fcb73fe3ef6b9dff51a3b5tree
parent7d232ab276fe81c1c8552d4a809af7a593bb294bcommit | diff
net/http/cgi: reject invalid header names

Being lenient on those has caused enough security issues.

Spun out of CL 231419.

Fixes #38889

Change-Id: Idd3bc6adc22e08a30b3dabb146ce78d4105684cd
Reviewed-on: https://go-review.googlesource.com/c/go/+/232277
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
src/go/build/deps_test.go diff | blob | history
src/net/http/cgi/host.go diff | blob | history
Go GOST TLS 1.3