]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Explicitly reject CGI output which includes a Transfer-Encoding
authorJoe Orton <jorton@apache.org>
Mon, 20 May 2024 09:18:10 +0000 (09:18 +0000)
committerJoe Orton <jorton@apache.org>
Mon, 20 May 2024 09:18:10 +0000 (09:18 +0000)
commite03580554f17084877c6db4d79885ac00c77fa49
tree47dd11bd5845638c7fc9af4108e4479e22cc455d
parentf9b0720e2a1b3b53db122b503c0c5f11615a6e95
Explicitly reject CGI output which includes a Transfer-Encoding
header, rather than drop it and send what's likely to be an unexpected
or corrupted response.

* modules/generators/cgi_common.h (cgi_handle_response): Send a 502
  error if Transfer-Encoding is present in the response headers.

PR: 68970
Github: closes #444

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917835 13f79535-47bb-0310-9956-ffa450edef68
changes-entries/pr68970.txt [new file with mode: 0644]
modules/generators/cgi_common.h