[webkit-changes] [WebKit/WebKit] 67a400: Merge 254245 at main - X-Frame-Options HTTP headers w...

Chris Dumez noreply at github.com
Wed Sep 7 15:15:42 PDT 2022


  Branch: refs/heads/webkitgtk/2.36
  Home:   https://github.com/WebKit/WebKit
  Commit: 67a400972a52d8cdaf64c4f19beffe50c6714449
      https://github.com/WebKit/WebKit/commit/67a400972a52d8cdaf64c4f19beffe50c6714449
  Author: Chris Dumez <cdumez at apple.com>
  Date:   2022-09-07 (Wed, 07 Sep 2022)

  Changed paths:
    M Source/WebCore/platform/network/HTTPParsers.cpp

  Log Message:
  -----------
  Merge 254245 at main - X-Frame-Options HTTP headers with an empty value are incorrectly being ignored
https://bugs.webkit.org/show_bug.cgi?id=244889

Reviewed by Geoffrey Garen and Brent Fulgham.

X-Frame-Options HTTP headers with an empty value are incorrectly being ignored.
The issue was that we were using split() instead of splitAllowingEmptyEntries(),
which was causing us to skip empty header values.

* LayoutTests/imported/w3c/web-platform-tests/x-frame-options/multiple-expected.txt:
* Source/WebCore/platform/network/HTTPParsers.cpp:
(WebCore::parseXFrameOptionsHeader):

Canonical link: https://commits.webkit.org/254245@main

(cherry picked from commit 8c97181d75591874ad4312a0d1df22ff5d6a8fa0)




More information about the webkit-changes mailing list