We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents b6a8843 + 5233609 commit 5e28b2dCopy full SHA for 5e28b2d
crates/hyper/RUSTSEC-2017-0002.toml
@@ -6,7 +6,7 @@ date = "2017-01-23"
6
url = "https://github.com/hyperium/hyper/wiki/Security-001"
7
title = "headers containing newline characters can split messages"
8
description = """
9
-Serializing of headers to the socket did not filter the values for newline bytes (\r or \n),
+Serializing of headers to the socket did not filter the values for newline bytes (\\r or \\n),
10
which allowed for header values to split a request or response. People would not likely include
11
newlines in the headers in their own applications, so the way for most people to exploit this
12
is if an application constructs headers based on unsanitized user input.
0 commit comments