Skip to content

HTTP startline validation #2134

@jorenkoyen

Description

@jorenkoyen

Issue

Recently Netty fixed an issue regarding HTTP startline validation see their ticket.
We noticed the issue in the validation after recently bumping our version of async-http-client to 3.0.5.

Problem

As an example, this issue causes the character J to be considered \n.
As the current validation in Netty 4.2.8 Final performs the following:

// same as newline
(1L << 'J') == (1L << '\n'); // true
// same as carriage return
(1L << 'M') == (1L << '\r'); // true

Fix

I can open up a PR to bump the Netty dependency from 4.2.8.Final to 4.2.9.Final.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions