diff options
| author | normal <normal@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2018-03-28 08:38:26 +0000 |
|---|---|---|
| committer | normal <normal@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2018-03-28 08:38:26 +0000 |
| commit | d9d4a28f1cdd05a0e8dabb36d747d40bbcc30f16 (patch) | |
| tree | d5c208676e8789e429c508965e1a8e70b1ae626f /test/test_tracer.rb | |
| parent | 7292569d3fefacee8dd9cac739a07f4af1a1c808 (diff) | |
webrick: prevent response splitting and header injection
Original patch by tenderlove (with minor style adjustments).
* lib/webrick/httpresponse.rb (send_header): call check_header
(check_header): raise on embedded CRLF in header value
* test/webrick/test_httpresponse.rb
(test_prevent_response_splitting_headers): new test
* (test_prevent_response_splitting_cookie_headers): ditto
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@62968 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'test/test_tracer.rb')
0 files changed, 0 insertions, 0 deletions