Skip to content

HTTP startline validation #2134

@jorenkoyen

Description

@jorenkoyen

Issue

Recently Netty fixed an issue regarding HTTP startline validation see their ticket.
We noticed the issue in the validation after recently bumping our version of async-http-client to 3.0.5.

Problem

As an example, this issue causes the character J to be considered \n.
As the current validation in Netty 4.2.8 Final performs the following:

// same as newline
(1L << 'J') == (1L << '\n'); // true
// same as carriage return
(1L << 'M') == (1L << '\r'); // true

Fix

I can open up a PR to bump the Netty dependency from 4.2.8.Final to 4.2.9.Final.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions