[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[libmicrohttpd] Request: stricter checks for client input
From: |
Tim Rühsen |
Subject: |
[libmicrohttpd] Request: stricter checks for client input |
Date: |
Thu, 1 Mar 2018 09:21:51 +0100 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 |
Hi,
could MHD_OPTION_STRICT_FOR_CLIENT be more strict regarding spaces in
the 'resource' of HTTP requests, please ?
Currently MHD accepts spaces (instead %20 resp. +) and converts them to
+ for the return value of MHD_get_connection_values().
This makes a test for wget2 succeed though wget2 doesn't send a correct
request line. (Only on older versions of MHD this test fails).
The appropriate code seems to be in parse_initial_message_line():
/* Search from back to accept misformed URI with space */
With Best Regards, Tim
signature.asc
Description: OpenPGP digital signature
- [libmicrohttpd] Request: stricter checks for client input,
Tim Rühsen <=