[
https://issues.apache.org/jira/browse/TS-4043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15031998#comment-15031998
]
ASF GitHub Bot commented on TS-4043:
------------------------------------
GitHub user danobi opened a pull request:
https://github.com/apache/trafficserver/pull/356
TS-4043 Prevent bogus FQDN characters in host header
Validate the host header string to prevent malformed hostnames from being
let in.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/danobi/trafficserver TS-4043
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/trafficserver/pull/356.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #356
----
commit 28196662b1d9b5bb327ce602327fcbde62d237f7
Author: Daniel Xu <[email protected]>
Date: 2015-11-23T20:35:41Z
TS-4043 Prevent bogus FQDN characters in host header
Validate the host header string to prevent malformed hostnames from being
let in.
----
> Prevent bogus FQDN characters in host header
> --------------------------------------------
>
> Key: TS-4043
> URL: https://issues.apache.org/jira/browse/TS-4043
> Project: Traffic Server
> Issue Type: Bug
> Components: Security
> Reporter: Daniel Xu
> Assignee: Leif Hedstrom
>
> Currently ATS isn't checking if a character is valid before letting it in as
> a hostname.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
