sinjuginas/haproxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
d02e1170f8
haproxy/reg-tests/http-rules
History
Mateusz Malek 833b224e56 BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names 
When using `option http-restrict-req-hdr-names delete`, HAproxy may
crash or delete wrong header after receiving request containing multiple
forbidden characters in single header name; exact behavior depends on
number of request headers, number of forbidden characters and position
of header containing them.

This patch fixes GitHub issue #1822.

Must be backported as far as 2.2 (buggy feature got included in 2.2.25,
2.4.18 and 2.5.8).

(cherry picked from commit 4b85a963be)
Signed-off-by: Willy Tarreau <w@1wt.eu>
2022-08-17 15:58:41 +02:00
..
1k.txt REGTESTS: Add reg tests for the HTTP return action 2020-02-06 15:13:04 +01:00
acl_cli_spaces.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
agents.acl REGTEST: http-rules: test spaces in ACLs 2020-06-19 14:32:55 +02:00
converters_ipmask_concat_strcmp_field_word.map REGTEST: rename the reg test files. 2019-04-23 15:37:03 +02:00
converters_ipmask_concat_strcmp_field_word.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
default_rules.vtc BUG/MEDIUM: rules: Be able to use captures defined in defaults section 2022-04-25 15:28:21 +02:00
del_header.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
except-forwardfor-originalto.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
h1_to_h1c.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
h1or2_to_h1c.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
http_after_response.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
http_return.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
lf-file.txt REGTESTS: Add reg tests for the HTTP return action 2020-02-06 15:13:04 +01:00
map_redirect-be.map REGTEST: rename the reg test files. 2019-04-23 15:37:03 +02:00
map_redirect.map MINOR: http-rules: add a new "ignore-empty" option to redirects. 2021-09-02 17:06:18 +02:00
map_redirect.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
map_regm_with_backref.map REGTEST: rename the reg test files. 2019-04-23 15:37:03 +02:00
map_regm_with_backref.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
normalize_uri.vtc REGTESTS: fix the race conditions in normalize_uri.vtc 2022-02-28 17:16:55 +01:00
path_and_pathq.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
restrict_req_hdr_names.vtc BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names 2022-08-17 15:58:41 +02:00
strict_rw_mode.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00