apache-http-server/pr68970.txt at 84ecd2f2b97c706aa4b62d06ea7a56c943bb6c3d - apache-http-server - Gitea: Git with a cup of tea

VladPolskiy/apache-http-server

mirror of https://github.com/apache/httpd.git synced 2025-08-16 17:04:42 +00:00

Files

Joe Orton e03580554f Explicitly reject CGI output which includes a Transfer-Encoding

header, rather than drop it and send what's likely to be an unexpected
or corrupted response.

* modules/generators/cgi_common.h (cgi_handle_response): Send a 502
  error if Transfer-Encoding is present in the response headers.

PR: 68970
Github: closes #444


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917835 13f79535-47bb-0310-9956-ffa450edef68

2024-05-20 09:18:10 +00:00

5 lines

151 B

Plaintext

Raw Blame History

   *) mod_cgi/mod_cgid: Reject CGI output with a Transfer-Encoding
      header to avoid unexpected or corrupted responses.  PR 68970.
      [Joe Orton]