romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-25 02:13:33 +03:00
Code Issues Projects Releases Packages Wiki Activity

cookie: reject control octets in file-loaded cookies

Browse source 
Verified by test 2311

Closes #22070
This commit is contained in:
alhudz 2026-06-17 20:15:11 +05:30 • committed by Daniel Stenberg
parent 9ccc80b192
commit 4a86af9940
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
3 changed files with 65 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
lib/cookie.c
View file

@ -786,6 +786,14 @@ static CURLcode parse_netscape(struct Cookie *co,
/* we did not find the sufficient number of fields */
return CURLE_OK;
/* Reject control octets in the name or value, matching the filtering done
for cookies set over HTTP. A cookie loaded from a file is later sent in
request headers, so the same bytes that make a server reject a request
must not slip in through the file. */
if(invalid_octets(co->name, strlen(co->name)) ||
invalid_octets(co->value, strlen(co->value)))
return CURLE_OK;
*okay = TRUE;
return CURLE_OK;
}