Re: multiline HTTP headers support in header()

On 3 Jul 2014, at 01:36, Solar Designer <solar@openwall.com> wrote: > Please drop multiline HTTP headers support from PHP header() Would this be a backwards-compatibility break? We could convert multi-line headers into single-line headers, I suppose, but surely it would still break BC? Be that the case, we should probably only do this for PHP 6. Though I wonder if multi-line headers are obscure enough, and the security benefits justifiable enough, that we could do it in 5.7. -- Andrea Faulds http://ajf.me/