]> git.ipfire.org Git - thirdparty/squid.git/commit - src/HttpHeader.cc
RFC 7230: server MUST reject messages with BWS after field-name (#445)
authorAmos Jeffries <yadij@users.noreply.github.com>
Wed, 11 Sep 2019 02:52:52 +0000 (02:52 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Wed, 11 Sep 2019 02:52:56 +0000 (02:52 +0000)
commit2358b9750fe1d6ab9c62b0ff76f8cc50e620233d
treea93e61b00b3dde55f8a3f72b892af340549d0da5
parent6c880a1675820e193b111d58893bc03f90396f27
RFC 7230: server MUST reject messages with BWS after field-name (#445)

Obey the RFC requirement to reject HTTP requests with whitespace
between field-name and the colon delimiter. Rejection is
critical in the presence of broken HTTP agents that mishandle
malformed messages.

Also obey requirement to always strip such whitespace from HTTP
response messages. The relaxed parser is no longer necessary for
this response change.

For now non-HTTP protocols retain the old behaviour of removal
only when using the relaxed parser.
src/HttpHeader.cc
src/HttpHeader.h
src/tests/stub_HttpHeader.cc