http-garden icon indicating copy to clipboard operation
http-garden copied to clipboard
verified publisher icon narfindustries

Fuzzer doesn't account for the fact that Bun and Deno ignore message bodies in `GET` requests.

Open kenballus opened this issue 1 year ago • 2 comments

This could use a normalization

kenballus avatar Feb 08 '24 05:02 kenballus

Related: lighttpd by default will reject GET with request body with 400 Bad Request unless lighttpd.conf is explicitly configured to permit GET with request body: server.http-parseopts += ("method-get-body" => "enable") Reference: lighttpd server.http-parseopts documentation

gstrauss avatar Feb 08 '24 08:02 gstrauss

I had noticed this, but didn't see that option. I will enable that in the Lighttpd config. Thanks!

kenballus avatar Feb 08 '24 12:02 kenballus