[Webkit-unassigned] [Bug 272740] NUL bytes in header values allowed for fetch-API

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Apr 29 05:46:00 PDT 2024


https://bugs.webkit.org/show_bug.cgi?id=272740

youenn fablet <youennf at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |youennf at gmail.com

--- Comment #2 from youenn fablet <youennf at gmail.com> ---
This seems to be restricted to no-cors case, where we do a sanitization in networking process, while we should check for nul headers in the response before.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240429/1543685a/attachment-0001.htm>


More information about the webkit-unassigned mailing list