usa
bbda1a0274
merge revision(s) 62968:
...
webrick: prevent response splitting and header injection
Original patch by tenderlove (with minor style adjustments).
* lib/webrick/httpresponse.rb (send_header): call check_header
(check_header): raise on embedded CRLF in header value
* test/webrick/test_httpresponse.rb
(test_prevent_response_splitting_headers): new test
* (test_prevent_response_splitting_cookie_headers): ditto
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_2@63022 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
2018-03-28 14:50:27 +00:00
..
2014-08-10 01:34:50 +00:00
2016-08-16 05:53:14 +00:00
2017-03-25 15:09:48 +00:00
2014-07-18 10:11:18 +00:00
2017-12-14 13:53:48 +00:00
2014-07-27 11:04:28 +00:00
2014-07-27 11:04:28 +00:00
2014-12-06 00:22:51 +00:00
2014-07-07 02:07:01 +00:00
2015-01-19 02:45:40 +00:00
2016-08-16 04:39:33 +00:00
2014-08-21 04:23:56 +00:00
2015-09-29 18:45:50 +00:00
2018-02-16 16:27:56 +00:00
2014-08-26 02:44:26 +00:00
2014-11-11 17:41:53 +00:00
2016-09-30 15:57:06 +00:00
2018-03-28 14:50:27 +00:00
2016-03-09 14:01:02 +00:00
2013-08-12 04:29:49 +00:00
2014-07-11 08:16:05 +00:00
2013-05-19 03:10:21 +00:00
2014-09-11 08:09:07 +00:00
2014-08-07 06:14:29 +00:00
2015-07-03 19:31:05 +00:00
2014-11-04 03:21:53 +00:00
2013-12-14 14:48:36 +00:00
2014-07-26 17:11:56 +00:00
2003-06-18 15:45:12 +00:00
2014-08-24 07:16:25 +00:00
2014-05-31 19:54:55 +00:00
2014-12-12 10:48:57 +00:00
2017-03-25 18:24:28 +00:00
2014-10-13 07:34:23 +00:00
2017-03-25 14:43:16 +00:00
2013-05-19 14:50:47 +00:00
2015-11-24 15:49:21 +00:00
2016-03-28 15:07:06 +00:00
2016-10-27 07:47:14 +00:00
2014-08-26 12:07:57 +00:00
2014-11-27 01:03:46 +00:00
2017-03-26 16:42:03 +00:00
2012-11-16 16:55:29 +00:00
2013-02-20 02:51:51 +00:00
2014-08-27 12:21:41 +00:00
2014-11-04 03:09:28 +00:00
2014-12-24 09:11:05 +00:00
2014-05-26 03:25:38 +00:00
2017-03-25 18:28:27 +00:00
2017-03-25 18:35:09 +00:00
2014-12-05 19:35:19 +00:00
2014-08-22 02:38:59 +00:00
2014-12-10 20:38:13 +00:00
2008-07-08 13:28:57 +00:00
2013-05-19 23:04:36 +00:00
2014-07-23 19:31:18 +00:00
2014-12-06 00:22:51 +00:00
2014-12-07 01:22:37 +00:00
2013-03-11 13:47:04 +00:00
2015-05-19 17:05:35 +00:00
2011-05-11 10:22:16 +00:00
2018-02-16 16:27:56 +00:00
2014-02-15 01:33:03 +00:00
2016-04-22 09:17:57 +00:00
2014-08-06 11:28:21 +00:00
2014-08-24 07:16:25 +00:00
2014-09-05 10:00:46 +00:00
2011-05-18 14:09:38 +00:00
2013-05-19 03:10:21 +00:00
2014-09-21 01:40:21 +00:00
2014-08-27 12:10:21 +00:00
2015-08-03 19:11:41 +00:00
2015-08-10 17:08:37 +00:00
2018-03-28 14:34:14 +00:00
2013-07-18 13:50:32 +00:00
2014-11-26 10:46:50 +00:00
2007-11-10 07:48:56 +00:00
2013-07-05 13:43:25 +00:00
2015-01-16 02:06:34 +00:00
2014-11-03 00:33:44 +00:00
2014-07-26 17:12:11 +00:00
2013-10-05 23:39:32 +00:00
2013-12-12 03:09:19 +00:00
2014-06-26 02:52:46 +00:00