365769366b
We forbid setting these INI options to values containing NUL bytes, CR or LF. Closes GH-7574.
12 lines
281 B
PHP
12 lines
281 B
PHP
--TEST--
|
|
Bug #81518 (Header injection via default_mimetype / default_charset)
|
|
--CGI--
|
|
--FILE--
|
|
<?php
|
|
ini_set('default_charset', 'ISO-8859-1' . "\r\nHeader-Injection: Works!");
|
|
header('Content-Type: text/html');
|
|
?>
|
|
--EXPECTHEADERS--
|
|
Content-type: text/html;charset=UTF-8
|
|
--EXPECT--
|