Skip to content

[v6.x] fix: Do not allow empty header separated by CR.#228

Merged
ShogunPanda merged 1 commit intonodejs:v6.xfrom
ShogunPanda:backport-13-to-v6.x
Jun 21, 2023
Merged

[v6.x] fix: Do not allow empty header separated by CR.#228
ShogunPanda merged 1 commit intonodejs:v6.xfrom
ShogunPanda:backport-13-to-v6.x

Conversation

@ShogunPanda
Copy link
Contributor

This PR forbids empty header separated by CR when no leniency is allowed.

Fixes: https://hackerone.com/reports/2001873

@ShogunPanda ShogunPanda changed the title fix: Do not allow empty header separated by CR. [v6.x] fix: Do not allow empty header separated by CR. Jun 21, 2023
@ShogunPanda ShogunPanda merged commit 94a8e7e into nodejs:v6.x Jun 21, 2023
@ShogunPanda ShogunPanda deleted the backport-13-to-v6.x branch June 21, 2023 08:23
erikolofsson pushed a commit to Favro/llhttp that referenced this pull request Jun 26, 2023
AdamMajer pushed a commit to AdamMajer/llhttp that referenced this pull request Apr 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant