libmicrohttpd
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[libmicrohttpd] Request: stricter checks for client input


From: Tim Rühsen
Subject: [libmicrohttpd] Request: stricter checks for client input
Date: Thu, 1 Mar 2018 09:21:51 +0100
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0

Hi,

could MHD_OPTION_STRICT_FOR_CLIENT be more strict regarding spaces in
the 'resource' of HTTP requests, please ?

Currently MHD accepts spaces (instead %20 resp. +) and converts them to
+ for the return value of MHD_get_connection_values().


This makes a test for wget2 succeed though wget2 doesn't send a correct
request line. (Only on older versions of MHD this test fails).

The appropriate code seems to be in parse_initial_message_line():
/* Search from back to accept misformed URI with space */

With Best Regards, Tim


Attachment: signature.asc
Description: OpenPGP digital signature


reply via email to

[Prev in Thread] Current Thread [Next in Thread]