Re: Disallow newlines in CURLOPT_HTTPHEADER
| From: | Matteo Beccati | Date: | Mon, 27 Jul 2026 10:12:40 +0000 |
| Subject: | Re: Disallow newlines in CURLOPT_HTTPHEADER | ||
| References: | 1 2 3 4 5 6 7 8 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-132107@lists.php.net to get a copy of this message | ||
Hi Sjoerd,
On Mon, 27 Jul 2026, at 11:21, Sjoerd Langkemper wrote:
> Given that Daniel Stenberg has said that newlines are not permitted, and is currently
> developing a pull request to reject them, does this change your view on whether PHP should reject
> newlines in headers passed to curl? Do you think I still need an RFC for this functionality?
My point of view is that libcurl will eventually take care of it. No pressing need to do anything on
our side.
Cheers
--
Matteo Beccati