http-parser
http-parser copied to clipboard
http-parser invalid octets allowed in reason-phrase
rfc7230 defines:
reason-phrase = *( HTAB / SP / VCHAR / obs-text )
VCHAR excludes all control characters except HTAB, but http-parser allows them:
https://github.com/nodejs/http-parser/blob/f2c26ee500ab3921010fa7ec66243365611e77dd/http_parser.c#L916