Skip to content

HTTPD: no verification of incorrect UTF-8 codes in the path URI #1

@Doczom

Description

@Doczom

no verification of incorrect UTF-8 codes in the path URI

the implementation of the HTTP request parser does not process the correctness of UTF-8 codes, which makes it possible to transmit sequences that take up 2 bytes, but produce the character code ".". This causes the request to be ignored by modules set to the URI path "/.". For this reason, the server may be sending data that is not allowed to be sent.

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions