Skip to content

Commit

Permalink
Merge pull request #178 from vks/backticks
Browse files Browse the repository at this point in the history
Use backticks for escaped characters
  • Loading branch information
tarcieri authored Oct 7, 2019
2 parents 5e28b2d + 2dda7f3 commit d031744
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion crates/hyper/RUSTSEC-2017-0002.toml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ date = "2017-01-23"
url = "https://github.com/hyperium/hyper/wiki/Security-001"
title = "headers containing newline characters can split messages"
description = """
Serializing of headers to the socket did not filter the values for newline bytes (\\r or \\n),
Serializing of headers to the socket did not filter the values for newline bytes (`\\r` or `\\n`),
which allowed for header values to split a request or response. People would not likely include
newlines in the headers in their own applications, so the way for most people to exploit this
is if an application constructs headers based on unsanitized user input.
Expand Down

0 comments on commit d031744

Please sign in to comment.