usa bbda1a0274 merge revision(s) 62968: ...

webrick: prevent response splitting and header injection

	Original patch by tenderlove (with minor style adjustments).

	* lib/webrick/httpresponse.rb (send_header): call check_header
	  (check_header): raise on embedded CRLF in header value
	* test/webrick/test_httpresponse.rb
	  (test_prevent_response_splitting_headers): new test
	* (test_prevent_response_splitting_cookie_headers): ditto

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_2@63022 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

2018-03-28 14:50:27 +00:00

..

.htaccess

test material for r16453.

2008-05-18 13:54:04 +00:00

test_cgi.rb

merge revision(s) 55731: [Backport #12610]

2016-08-16 04:41:26 +00:00

test_cookie.rb

* lib/webrick/cookie.rb (WEBrick::Cookie.parse): Revert r31228.

2011-06-20 06:48:40 +00:00

test_filehandler.rb

merge revision(s) 60584,62954-62959,63008:

2018-03-28 14:44:20 +00:00

test_htmlutils.rb

webrick: fix non-ascii escape bugs

2013-05-20 01:40:30 +00:00

test_httpauth.rb

merge revision(s) 62960-62965:

2018-03-28 14:47:30 +00:00

test_httpproxy.rb

skip old OpenSSL

2014-12-13 07:12:56 +00:00

test_httprequest.rb

* test: get rid of warnings.

2014-03-11 04:22:34 +00:00

test_httpresponse.rb

merge revision(s) 62968:

2018-03-28 14:50:27 +00:00

test_httpserver.rb

merge revision(s) 62960-62965:

2018-03-28 14:47:30 +00:00

test_httputils.rb

webrick: fix non-ascii escape bugs

2013-05-20 01:40:30 +00:00

test_httpversion.rb

* lib/webrick/httpproxy.rb (WEBrick::HTTPProxyServer#proxy_service):

2005-01-07 11:05:22 +00:00

test_server.rb

* lib/webrick/server.rb: Setup shutdown pipe in listen method.

2014-11-10 11:05:00 +00:00

test_utils.rb

* test: assert_raises has been deprecated since a long time ago.

2008-09-24 17:44:39 +00:00

utils.rb

* test/lib/envutil.rb: Moved from test/ruby/.

2014-11-13 16:05:37 +00:00

webrick_long_filename.cgi

* test/webrick/webrick.cgi: Don't use debug mode.

2014-11-09 20:58:22 +00:00

webrick.cgi

merge revision(s) 55731: [Backport #12610]

2016-08-16 04:41:26 +00:00