Re: The case of HTTP response splitting protection in PHP
| From: | Nikita Popov | Date: | Sat, 04 Feb 2012 10:35:37 +0000 |
| Subject: | Re: The case of HTTP response splitting protection in PHP | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57695@lists.php.net to get a copy of this message | ||
On Sat, Feb 4, 2012 at 12:06 AM, Ángel González <keisial@gmail.com> wrote:
> I've gone ahead and written code for that feature. Comments welcome.
If I understand it correctly your code only allows \r\n[ \t] style
line continuations, whereas catahracts previous version allowed
(?>\r\n|\r|\n)[ \t]. Is that intentional?
Nikita