[
https://issues.apache.org/jira/browse/TS-4043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15032494#comment-15032494
]
ASF GitHub Bot commented on TS-4043:
------------------------------------
Github user jpeach commented on the pull request:
https://github.com/apache/trafficserver/pull/356#issuecomment-160765501
Can you extract the guts of ```validate_hdr_host``` into a separate
function and use that to add a regression test host validation?
Are you sure that the the return value of ```ats_ip_parse``` really makes
sense? It looks like this code depends on it returning a successful status but
not parsing any bytes.
> Prevent bogus FQDN characters in host header
> --------------------------------------------
>
> Key: TS-4043
> URL: https://issues.apache.org/jira/browse/TS-4043
> Project: Traffic Server
> Issue Type: Bug
> Components: Security
> Reporter: Daniel Xu
> Assignee: Leif Hedstrom
> Fix For: 6.1.0
>
>
> Currently ATS isn't checking if a character is valid before letting it in as
> a hostname.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
