curl/lib/curlx
trxvorr f81e7197c1
digest: fix OWS and escaped quote handling
The migration to the strparse API introduced regressions in Digest
authentication parsing where Optional Whitespace (OWS) after commas was
not skipped, and escaped quotes in values were not correctly parsed.

This change ensures whitespace is skipped before key lookups and escaped
characters are properly handled and unescaped in quoted values.

Reported-by: herdiyanitdev on hackerone
Closes #20102
2025-12-30 23:22:26 +01:00
..
base64.c curlx: rename Curl_-prefixed symbols to curlx_ 2025-12-22 01:47:22 +01:00
base64.h curlx: rename Curl_-prefixed symbols to curlx_ 2025-12-22 01:47:22 +01:00
binmode.h binmode: delete extra nop instruction from fallback macro 2025-12-22 01:47:21 +01:00
curlx.h curlx: curlx_strcopy() instead of strcpy() 2025-12-22 23:01:05 +01:00
dynbuf.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
dynbuf.h build: drop duplicate include curl/curl.h and others 2025-12-19 10:58:11 +01:00
fopen.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
fopen.h tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
inet_ntop.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
inet_ntop.h tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
inet_pton.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
inet_pton.h tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
multibyte.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
multibyte.h tidy-up: avoid (()), clang-format fixes and more 2025-12-05 16:07:03 +01:00
nonblock.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
nonblock.h build: drop duplicate include curl/curl.h and others 2025-12-19 10:58:11 +01:00
snprintf.h curlx: replace sprintf with snprintf 2025-11-25 11:11:06 +01:00
strcopy.c strcopy: minor comment edit to avoid matching a grep for strcpy use 2025-12-27 23:25:13 +01:00
strcopy.h curlx: curlx_strcopy() instead of strcpy() 2025-12-22 23:01:05 +01:00
strerr.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
strerr.h curlx: move Curl_strerror, use in src and tests, ban strerror globally 2025-10-06 09:44:23 +02:00
strparse.c digest: fix OWS and escaped quote handling 2025-12-30 23:22:26 +01:00
strparse.h digest: fix OWS and escaped quote handling 2025-12-30 23:22:26 +01:00
timediff.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
timediff.h tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
timeval.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
timeval.h tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
version_win32.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
version_win32.h tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
wait.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
wait.h tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
warnless.c tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
warnless.h tidy-up: miscellaneous 2025-12-26 22:06:09 +01:00
winapi.c curlx: curlx_strcopy() instead of strcpy() 2025-12-22 23:01:05 +01:00
winapi.h windows: use native error code types more 2025-10-06 12:12:44 +02:00