http-parser icon indicating copy to clipboard operation
http-parser copied to clipboard

http-parser invalid octets allowed in reason-phrase

Open vinniefalco opened this issue 9 years ago • 0 comments

rfc7230 defines:

reason-phrase = *( HTAB / SP / VCHAR / obs-text )

VCHAR excludes all control characters except HTAB, but http-parser allows them: https://github.com/nodejs/http-parser/blob/f2c26ee500ab3921010fa7ec66243365611e77dd/http_parser.c#L916

vinniefalco avatar May 31 '16 23:05 vinniefalco