mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
webrick: prevent response splitting and header injection Original patch by tenderlove (with minor style adjustments). * lib/webrick/httpresponse.rb (send_header): call check_header (check_header): raise on embedded CRLF in header value * test/webrick/test_httpresponse.rb (test_prevent_response_splitting_headers): new test * (test_prevent_response_splitting_cookie_headers): ditto git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_2@63022 b2dd03c8-39d4-4d8f-98ff-823fe69b080e |
||
|---|---|---|
| .. | ||
| .htaccess | ||
| test_cgi.rb | ||
| test_cookie.rb | ||
| test_filehandler.rb | ||
| test_htmlutils.rb | ||
| test_httpauth.rb | ||
| test_httpproxy.rb | ||
| test_httprequest.rb | ||
| test_httpresponse.rb | ||
| test_httpserver.rb | ||
| test_httputils.rb | ||
| test_httpversion.rb | ||
| test_server.rb | ||
| test_utils.rb | ||
| utils.rb | ||
| webrick.cgi | ||
| webrick_long_filename.cgi | ||