| commit | 10f13b886b8a76889f5442f7347159d3677324d0 | |
| author | Eric Wong <bofh@yhbt.net> | |
| Thu, 16 Jun 2022 15:54:13 +0000 (16 15:54 +0000) | ||
| committer | Eric Wong <bofh@yhbt.net> | |
| Thu, 16 Jun 2022 16:09:56 +0000 (16 16:09 +0000) | ||
| tree | 5d5ef3fe9bc2384916ef8513233ed75495f61cb8 | treesnapshot (tar.gz zip) |
| parent | 4ee4e61d9bbbae0883bf51888239ffabd045d8d5 | commitdiff |
escape env['REQUEST_METHOD'] for non-strict HTTP servers
This doesn't affect most Rack HTTP servers since they have
strict parsers, but is safer in case one doesn't...
Influenced by CVE-2022-30123.
This doesn't affect most Rack HTTP servers since they have
strict parsers, but is safer in case one doesn't...
Influenced by CVE-2022-30123.
| ext/clogger_ext/clogger.c | diffblobblamehistory | |
| lib/clogger/pure.rb | diffblobblamehistory |