On 04/02/2015 09:52, Stanislav Malyshev wrote:
Hi!
Don't we prevent that already?
http://lxr.php.net/xref/PHP_5_6/main/SAPI.c#749
I'm not sure what you meant by "that", but the code you linked to allows
multi-line headers according to RFC 2616 - this is what comment in line
750 means. I propose to remove this (of course, no newline chars will be
allowed too as they are allowed only to support RFC 2616).
How about replacing \r and \n with spaces and throwing E_DEPRECATED instead?
Cheers
--
Matteo Beccati
Development & Consulting - http://www.beccati.com/
--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php
