1
0
mirror of https://github.com/golang/go synced 2024-11-19 10:34:46 -07:00
go/src/net/http
Brad Fitzpatrick 0421e78f05 net/http: fix too-strict validation of server header values
As Andy Balholm noted in #11207:

"RFC2616 §4.2 says that a header's field-content can consist of *TEXT,
and RFC2616 §2.2 says that TEXT is <any OCTET except CTLs, but
including LWS>, so that would mean that bytes greater than 128 are
allowed."

This is a partial rollback of the strictness from
https://golang.org/cl/11207 (added in the Go 1.6 dev cycle, only
released in Go 1.6beta1)

Fixes #11207

Change-Id: I3a752a7941de100e4803ff16a5d626d5cfec4f03
Reviewed-on: https://go-review.googlesource.com/18374
Reviewed-by: Russ Cox <rsc@golang.org>
Reviewed-by: Andrew Gerrand <adg@golang.org>
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
2016-01-08 06:01:23 +00:00
..
cgi
cookiejar
fcgi
httptest net/http/httptest: don't crash in mime sniffing if HeaderMap is nil 2015-12-10 18:51:54 +00:00
httputil net/http, net/http/httputil: fix nits found by vet 2016-01-07 01:01:33 +00:00
internal
pprof net/http/pprof: stop profiling if client's connection closes 2016-01-06 05:51:38 +00:00
testdata
client_test.go net/http: make Client use Request.Cancel for timeouts instead of CancelRequest 2016-01-05 22:55:22 +00:00
client.go net/http: make Client use Request.Cancel for timeouts instead of CancelRequest 2016-01-05 22:55:22 +00:00
clientserver_test.go net/http: add some tests around sending & receiving star requests 2016-01-07 23:06:17 +00:00
cookie_test.go
cookie.go
doc.go net/http: document GODEBUG settings, update bundled http2 2016-01-08 00:56:28 +00:00
example_test.go
export_test.go net/http: tighten protocol between Transport.roundTrip and persistConn.readLoop 2016-01-05 22:33:16 +00:00
filetransport_test.go
filetransport.go
fs_test.go net/http: run more tests in http2 mode 2015-12-10 04:43:08 +00:00
fs.go net/http: define File as an io.Seeker 2015-11-30 20:43:39 +00:00
h2_bundle.go net/http: document GODEBUG settings, update bundled http2 2016-01-08 00:56:28 +00:00
header_test.go
header.go net/http: make Client use Request.Cancel for timeouts instead of CancelRequest 2016-01-05 22:55:22 +00:00
http_test.go
jar.go
lex_test.go
lex.go
main_test.go net/http: add mechanism for marking flaky http tests 2016-01-06 21:00:48 +00:00
method.go net/http: add method constants 2015-11-13 10:12:46 +00:00
npn_test.go
proxy_test.go
race.go
range_test.go
readrequest_test.go
request_test.go net/url: reject space in host; do not escape < > " in host 2015-12-11 05:17:38 +00:00
request.go net/http: fix too-strict validation of server header values 2016-01-08 06:01:23 +00:00
requestwrite_test.go
response_test.go
response.go net/http: update Response.Trailer doc 2015-12-17 02:46:04 +00:00
responsewrite_test.go
serve_test.go net/http: fix too-strict validation of server header values 2016-01-08 06:01:23 +00:00
server.go net/http: document GODEBUG settings, update bundled http2 2016-01-08 00:56:28 +00:00
sniff_test.go net/http: run more tests in http2 mode 2015-12-10 04:43:08 +00:00
sniff.go net/http: add/update mp4 sniffing 2015-11-17 18:00:15 +00:00
status.go net/http: add new HTTP 451 status code, Unavailable For Legal Reasons. 2015-12-22 02:14:22 +00:00
transfer_test.go
transfer.go net/http: relax recently-updated rules and behavior of CloseNotifier 2016-01-05 04:39:11 +00:00
transport_test.go net/http: fix flaky TestTransportCancelBeforeResponseHeaders test 2016-01-06 21:01:08 +00:00
transport.go net/http: document GODEBUG settings, update bundled http2 2016-01-08 00:56:28 +00:00
triv.go