Re: The case of HTTP response splitting protection in PHP

From: Date: Fri, 03 Feb 2012 22:00:11 +0000
Subject: Re: The case of HTTP response splitting protection in PHP
References: 1 2 3 4  Groups: php.internals 
Request: Send a blank email to internals+get-57668@lists.php.net to get a copy of this message
Hi!
As it's a security patch and of small scope, I would consider it for 5.4. Stas, David?
Do we have unit tests for this code? The fix involves changes in header sending so it may have impact on lots of code. Changes like this can be dangerous. I'm thinking maybe we should wait with it until 5.4.1. -- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227

« previous php.internals (#57668) next »