From c489330987eca992cee0bb018a6fdb7ff5401704 Mon Sep 17 00:00:00 2001
From: Ainar Garipov ,
- In the net/http
package, the
- behavior of StripPrefix
- has been changed to strip the prefix from the request URL's
- RawPath
field in addition to its Path
field.
- In past releases, only the Path
field was trimmed, and so if the
- request URL contained any escaped characters the URL would be modified to
- have mismatched Path
and RawPath
fields.
- In Go 1.16, StripPrefix
trims both fields.
- If there are escaped characters in the prefix part of the request URL the
- handler serves a 404 instead of its previous behavior of invoking the
- underlying handler with a mismatched Path
/RawPath
pair.
-
- The net/http
package now rejects HTTP range requests
- of the form "Range": "bytes=--N"
where "-N"
is a negative suffix length, for
- example "Range": "bytes=--2"
. It now replies with a 416 "Range Not Satisfiable"
response.
-
+ In the net/http
package, the
+ behavior of StripPrefix
+ has been changed to strip the prefix from the request URL's
+ RawPath
field in addition to its Path
field.
+ In past releases, only the Path
field was trimmed, and so if the
+ request URL contained any escaped characters the URL would be modified to
+ have mismatched Path
and RawPath
fields.
+ In Go 1.16, StripPrefix
trims both fields.
+ If there are escaped characters in the prefix part of the request URL the
+ handler serves a 404 instead of its previous behavior of invoking the
+ underlying handler with a mismatched Path
/RawPath
pair.
+
+ The net/http
package now rejects HTTP range requests
+ of the form "Range": "bytes=--N"
where "-N"
is a negative suffix length, for
+ example "Range": "bytes=--2"
. It now replies with a 416 "Range Not Satisfiable"
response.
+