romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-25 03:23:32 +03:00
Code Issues Projects Releases Packages Wiki Activity

headers: enforce a max number of response header to accept

Browse source 
The limit is 5000 headers in a single transfer. To avoid problems caused
by mistakes or malice.

Add test 747 to verify

Reported-by: wolfsage on hackerone

Closes #17281
This commit is contained in:
Daniel Stenberg 2025-05-08 00:21:26 +02:00
parent d689bd915e
commit 40ef77b6da
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
5 changed files with 67 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tests/data/Makefile.am
View file

@ -107,7 +107,7 @@ test709 test710 test711 test712 test713 test714 test715 test716 test717 \
test718 test719 test720 test721 test722 test723 test724 test725 test726 \
test727 test728 test729 test730 test731 test732 test733 test734 test735 \
test736 test737 test738 test739 test740 test741 test742 test743 test744 \
test745 test746 \
test745 test746 test747 \
\
test780 test781 test782 test783 test784 test785 test786 test787 test788 \
test789 test790 test791 \