1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
ruby--ruby/test/webrick
usa bbda1a0274 merge revision(s) 62968:
webrick: prevent response splitting and header injection

	Original patch by tenderlove (with minor style adjustments).

	* lib/webrick/httpresponse.rb (send_header): call check_header
	  (check_header): raise on embedded CRLF in header value
	* test/webrick/test_httpresponse.rb
	  (test_prevent_response_splitting_headers): new test
	* (test_prevent_response_splitting_cookie_headers): ditto

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_2@63022 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
2018-03-28 14:50:27 +00:00
..
.htaccess
test_cgi.rb merge revision(s) 55731: [Backport #12610] 2016-08-16 04:41:26 +00:00
test_cookie.rb
test_filehandler.rb merge revision(s) 60584,62954-62959,63008: 2018-03-28 14:44:20 +00:00
test_htmlutils.rb webrick: fix non-ascii escape bugs 2013-05-20 01:40:30 +00:00
test_httpauth.rb merge revision(s) 62960-62965: 2018-03-28 14:47:30 +00:00
test_httpproxy.rb skip old OpenSSL 2014-12-13 07:12:56 +00:00
test_httprequest.rb * test: get rid of warnings. 2014-03-11 04:22:34 +00:00
test_httpresponse.rb merge revision(s) 62968: 2018-03-28 14:50:27 +00:00
test_httpserver.rb merge revision(s) 62960-62965: 2018-03-28 14:47:30 +00:00
test_httputils.rb webrick: fix non-ascii escape bugs 2013-05-20 01:40:30 +00:00
test_httpversion.rb
test_server.rb * lib/webrick/server.rb: Setup shutdown pipe in listen method. 2014-11-10 11:05:00 +00:00
test_utils.rb
utils.rb * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
webrick.cgi merge revision(s) 55731: [Backport #12610] 2016-08-16 04:41:26 +00:00
webrick_long_filename.cgi * test/webrick/webrick.cgi: Don't use debug mode. 2014-11-09 20:58:22 +00:00