Azure / Azure/azure-sdk-for-cpp
CURL transport InsertHeaderWithValidation does not validate value inserted.
Open
needs-triage
- Dominant language
- C++
- Stars
- 205
- Forks
- 172
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 37
Description
**Describe the bug**
The CURL transport function InsertHeaderWithValidation validates the contents of the HTTP header inserted but it does not validate the *value* of that inserted header.
**Expected behavior**
Only valid headers and values should be allowed into HTTP requests following the [official HTTP 1.1 grammar](https://www.rfc-editor.org/rfc/rfc2616#section-4.2).
Contributor guide
Assessment
This issue has not been assessed yet.