Re: The case of HTTP response splitting protection in PHP
| From: | Gustavo Lopes | Date: | Fri, 03 Feb 2012 12:03:24 +0000 |
| Subject: | Re: The case of HTTP response splitting protection in PHP | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57657@lists.php.net to get a copy of this message | ||
On Fri, 03 Feb 2012 12:06:26 +0100, Stefan Esser <stefan.esser@sektioneins.de> wrote:
[snip] obviously inside PHP no one cares about reviewing security patches.Perhaps then you'd want to comment on: http://nebm.ist.utl.pt/~glopes/misc/bug60227.diff , which addresses the NUL byte issue, although now I'm thinking that since we're in the business of validating HTTP headers, we could also forbid the other control characters that are forbidden by the spec (not just LF and CR). Thank you -- Gustavo Lopes