HTTP: Do not allow multiple CRs before LF

This is not permitted by RFC9112.
This commit is contained in:
Demi Marie Obenour 2025-03-14 02:10:46 -04:00
parent dab8c0e762
commit e30ddb7a3b

View File

@ -1040,8 +1040,6 @@ ngx_http_parse_header_line(ngx_http_request_t *r, ngx_buf_t *b,
switch (ch) {
case LF:
goto done;
case CR:
break;
default:
return NGX_HTTP_PARSE_INVALID_HEADER;
}