diff options
| author | Emmanuel T Odeke <emmanuel@orijtech.com> | 2024-03-18 23:05:12 -0700 |
|---|---|---|
| committer | Gopher Robot <gobot@golang.org> | 2024-03-20 11:31:46 +0000 |
| commit | 81a32eff7161ad6c15ace141b8e9dba8f81feac2 (patch) | |
| tree | 0a0cd290442f9288a6ec79905039d764c0783e6e /src/database/sql/sql.go | |
| parent | fba54f6345449586518039043ab38df337c25146 (diff) | |
| download | go-81a32eff7161ad6c15ace141b8e9dba8f81feac2.tar.xz | |
net/http: validate outgoing/client request trailers
This change validates outbound client request trailers
just like we do for headers. This helps prevent header
injection or other sorts of smuggling from easily being
performed using the standard HTTP client.
Fixes #64766
Change-Id: Idb34df876a0c308b1f57e9ae2695b118ac6bcc2d
Reviewed-on: https://go-review.googlesource.com/c/go/+/572615
Reviewed-by: David Chase <drchase@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Auto-Submit: Damien Neil <dneil@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>
Run-TryBot: Emmanuel Odeke <emmanuel@orijtech.com>
Auto-Submit: Emmanuel Odeke <emmanuel@orijtech.com>
Diffstat (limited to 'src/database/sql/sql.go')
0 files changed, 0 insertions, 0 deletions