usa
bbda1a0274
merge revision(s) 62968:
...
webrick: prevent response splitting and header injection
Original patch by tenderlove (with minor style adjustments).
* lib/webrick/httpresponse.rb (send_header): call check_header
(check_header): raise on embedded CRLF in header value
* test/webrick/test_httpresponse.rb
(test_prevent_response_splitting_headers): new test
* (test_prevent_response_splitting_cookie_headers): ditto
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_2@63022 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
2018-03-28 14:50:27 +00:00
..
2016-07-11 14:38:49 +00:00
2012-11-06 00:49:57 +00:00
2014-09-02 15:47:53 +00:00
2016-06-10 07:09:00 +00:00
2014-11-13 16:05:37 +00:00
2016-08-16 12:14:41 +00:00
2014-09-05 09:34:38 +00:00
2016-08-16 12:01:03 +00:00
2014-11-11 15:28:17 +00:00
2014-10-31 13:21:51 +00:00
2016-08-16 05:53:14 +00:00
2014-11-13 16:05:37 +00:00
2014-12-12 19:59:22 +00:00
2014-11-10 08:24:36 +00:00
2016-09-30 15:44:09 +00:00
2017-03-25 18:24:28 +00:00
2016-03-28 15:42:34 +00:00
2015-04-12 15:46:26 +00:00
2014-11-13 16:05:37 +00:00
2015-08-14 06:20:41 +00:00
2017-03-26 07:22:44 +00:00
2016-10-27 07:47:14 +00:00
2014-11-19 23:57:56 +00:00
2014-08-09 01:28:50 +00:00
2016-12-27 09:17:23 +00:00
2015-02-13 05:00:23 +00:00
2014-11-13 13:04:43 +00:00
2017-12-14 15:08:49 +00:00
2015-11-27 20:43:31 +00:00
2014-12-13 07:12:56 +00:00
2017-09-14 11:41:59 +00:00
2016-06-10 08:49:54 +00:00
2017-03-25 16:35:25 +00:00
2014-11-13 16:05:37 +00:00
2014-12-01 21:35:11 +00:00
2014-12-06 00:22:51 +00:00
2015-01-19 02:45:40 +00:00
2015-01-17 07:50:07 +00:00
2015-05-19 17:05:35 +00:00
2016-03-08 19:02:43 +00:00
2016-11-14 18:54:47 +00:00
2016-02-14 16:38:32 +00:00
2015-09-29 18:45:50 +00:00
2018-03-28 14:38:39 +00:00
2018-02-16 16:27:56 +00:00
2014-02-27 08:19:48 +00:00
2014-11-13 16:05:37 +00:00
2014-11-13 16:05:37 +00:00
2018-03-28 14:36:23 +00:00
2016-07-11 14:38:49 +00:00
2014-08-03 01:56:31 +00:00
2013-07-26 11:15:06 +00:00
2014-11-13 16:05:37 +00:00
2017-03-25 18:07:08 +00:00
2016-09-30 15:57:06 +00:00
2018-03-28 14:50:27 +00:00
2014-12-22 12:31:59 +00:00
2016-03-09 14:01:02 +00:00
2016-03-28 15:43:53 +00:00
2014-11-13 16:05:37 +00:00
2012-11-30 03:56:28 +00:00
2014-01-17 11:05:03 +00:00
2014-03-03 15:28:58 +00:00
2017-03-25 14:43:16 +00:00
2015-11-24 15:49:21 +00:00
2014-11-13 16:05:37 +00:00
2014-12-02 22:08:05 +00:00
2014-12-05 19:48:15 +00:00
2014-05-08 18:22:29 +00:00
2014-11-13 16:05:37 +00:00
2014-11-13 16:05:37 +00:00
2013-02-22 08:37:16 +00:00
2014-02-16 06:55:06 +00:00
2014-08-06 11:28:21 +00:00
2012-01-13 06:10:37 +00:00
2014-10-04 07:35:43 +00:00
2018-03-28 14:34:14 +00:00
2015-08-03 19:11:41 +00:00
2015-08-10 17:08:37 +00:00
2018-03-28 14:34:14 +00:00
2014-11-13 16:05:37 +00:00
2014-11-26 10:46:50 +00:00
2014-11-11 23:54:45 +00:00
2014-12-19 20:20:33 +00:00
2015-02-26 08:23:50 +00:00