Roberto Clapis
|
81045d8b47
|
http2: switch to ASCII equivalents of string functions
The current implementation uses UTF-aware functions
like strings.EqualFold and strings.ToLower.
This could, in some cases, cause http smuggling.
Change-Id: I7250b24bbefe2143b61cc8dbbe2853a66499d829
Reviewed-on: https://go-review.googlesource.com/c/net/+/313489
Trust: Roberto Clapis <roberto@golang.org>
Trust: Katie Hockman <katie@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
|
2021-05-10 09:51:57 +00:00 |
|