[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [libmicrohttpd] Request: stricter checks for client input
|
From: |
Christian Grothoff |
|
Subject: |
Re: [libmicrohttpd] Request: stricter checks for client input |
|
Date: |
Thu, 1 Mar 2018 13:30:37 +0100 |
|
User-agent: |
Mozilla/5.0 (X11; Linux i686; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 |
Should be implemented in 785ae52b..5717a9ec, feedback welcome... -Christian
On 03/01/2018 09:21 AM, Tim Rühsen wrote:
> Hi,
>
> could MHD_OPTION_STRICT_FOR_CLIENT be more strict regarding spaces in
> the 'resource' of HTTP requests, please ?
>
> Currently MHD accepts spaces (instead %20 resp. +) and converts them to
> + for the return value of MHD_get_connection_values().
>
>
> This makes a test for wget2 succeed though wget2 doesn't send a correct
> request line. (Only on older versions of MHD this test fails).
>
> The appropriate code seems to be in parse_initial_message_line():
> /* Search from back to accept misformed URI with space */
>
> With Best Regards, Tim
>
>
signature.asc
Description: OpenPGP digital signature