]> git.ipfire.org Git - thirdparty/squid.git/commit
Improve Transfer-Encoding handling (#702)
authorAmos Jeffries <yadij@users.noreply.github.com>
Sun, 16 Aug 2020 02:21:22 +0000 (02:21 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Sun, 16 Aug 2020 12:22:33 +0000 (12:22 +0000)
commitf6dd87e91711b194d808d99a9474c48a332db66f
tree571cb982d0c9dd0c5220402e178819e028af5b62
parent580448c9d95aaa94f7224a46a226f7cb3ba29f17
Improve Transfer-Encoding handling (#702)

Reject messages containing Transfer-Encoding header with coding other
than chunked or identity. Squid does not support other codings.

For simplicity and security sake, also reject messages where
Transfer-Encoding contains unnecessary complex values that are
technically equivalent to "chunked" or "identity" (e.g., ",,chunked" or
"identity, chunked").

RFC 7230 formally deprecated and removed identity coding, but it is
still used by some agents.
src/HttpHeader.cc
src/HttpHeader.h
src/client_side.cc
src/http.cc