 yhirose
|
cda2bb5342
Consolidate header field-pair validation into fields::is_field_valid
|
2 months ago |
|
Sayed Kaif
|
695961f8ae
skip invalid fields in write_headers to prevent response splitting
|
2 months ago |
|
yhirose
|
c64bf21a5e
Merge pull request #2504 from emreay-/skip-drain-on-closing-connection
|
2 months ago |
|
Emre Ay
|
8bbfc90380
Apply clang-format to test.cc and httplib.h
|
2 months ago |
|
yhirose
|
fd0c18b1b5
Validate connecting peer before honoring X-Forwarded-For
|
2 months ago |
|
yhirose
|
bbd56a7e2c
Merge pull request #2497 from superm1/superm1/SWSPLAT-23636
|
2 months ago |
|
yhirose
|
54b3c1d072
Add Mbed TLS 4.x support (PSA Crypto) (#2502)
|
2 months ago |
|
metsw24-max
|
6c4cbd49a2
scan X-Forwarded-For right-to-left in get_client_ip (#2503)
|
2 months ago |
|
Emre Ay
|
f3e9a4d887
Skip request body drain when connection will close
|
2 months ago |
|
Mario Limonciello
|
877a52f6b3
Limit the number of header lines per multipart form-data part
|
2 months ago |
|
yhirose
|
ef2beaea34
Fix MSVC C4146 warning for unsigned types in from_chars
|
2 months ago |
|
yhirose
|
3adc525cec
Use detail::from_chars for out-of-range Content-Length check
|
2 months ago |
|
Sayed Kaif
|
982235c0a9
flag out-of-range Content-Length in get_header_value_u64
|
2 months ago |
|
yhirose
|
255c075b82
Reject CR/LF in the request target and fail the request cleanly (#2501)
|
2 months ago |
|
yhirose
|
75938f08c7
Match chunked as the final transfer coding, order-independently (#2500)
|
2 months ago |
|
yhirose
|
0c1cc8c986
Strip Cookie headers on cross-origin redirect
|
2 months ago |
|
yhirose
|
62d899feac
Release v0.50.1
|
2 months ago |
|
yhirose
|
2f986fd5e5
Fix use-after-free of TLS session in WebSocketClient::shutdown_and_close()
|
2 months ago |
|
yhirose
|
ed97a6edba
Release v0.50.0
|
2 months ago |
|
yhirose
|
06b8b91589
Fix Response::content_length_ not reflecting body size in Logger (Fix #2488)
|
2 months ago |
|
yhirose
|
873d701972
Fix use-after-free in SSLClient destructor with mbedTLS (Fix #2492)
|
2 months ago |
|
yhirose
|
568d434e72
Fix CRLF injection in chunked response trailers
|
2 months ago |
|
Copilot
|
32abac3de5
Fix ambiguous Get() examples in README after new Params overload (#2486)
|
3 months ago |
|
yhirose
|
2132205e1a
Release v0.49.0
|
3 months ago |
|
yhirose
|
bd455f8b91
Add locale-independent ASCII classification helpers (Fix #2482, Fix #2483)
|
3 months ago |
|
yhirose
|
32ff75e355
Make ThreadPool idle timeout configurable at runtime (Fix #2481)
|
3 months ago |
|
yhirose
|
45da614ddd
Omit default port from WebSocket handshake Host header (Fix #2480)
|
3 months ago |
|
yhirose
|
f5c8c982df
Escape CR and LF in multipart part content types
|
3 months ago |
|
yhirose
|
9e8b960e44
Add public MultipartFormDataWriter for multipart body serialization
|
3 months ago |
|
yhirose
|
8149bb38fc
Escape quote, CR and LF in multipart field names and filenames
|
3 months ago |
