[
https://issues.apache.org/jira/browse/TS-4043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15032511#comment-15032511
]
ASF GitHub Bot commented on TS-4043:
------------------------------------
Github user SolidWallOfCode commented on the pull request:
https://github.com/apache/trafficserver/pull/356#issuecomment-160768214
James - so split out `validate_hdr_field` which takes a `char const*` and
make a regression test for that?
The use of `ats_ip_parse` is correct. It operates on a string and returns
the separate pieces of the string. The use of the `port` and `rest` values has
exactly the same dependency.
> Prevent bogus FQDN characters in host header
> --------------------------------------------
>
> Key: TS-4043
> URL: https://issues.apache.org/jira/browse/TS-4043
> Project: Traffic Server
> Issue Type: Bug
> Components: Security
> Reporter: Daniel Xu
> Assignee: Leif Hedstrom
> Fix For: 6.1.0
>
>
> Currently ATS isn't checking if a character is valid before letting it in as
> a hostname.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
