Revision history for Perl extension HTTP::Headers::Fast
0.16
- oops
0.15
- fixed deps
0.14
- fixed packaging issue
0.13
- fixed dependency issue
0.12
- Strip out empty lines separated by CRLF.(markstos)
Before the patch, an embedded CRLF would be allowed through with a
space added after it. This is spec-compliant but appears not to be
the intent, based on the regex to remove empty lines in headers. If
a client accepted "CRLF\sCRLF\s" as a valid header end, then a CRLF
injection attack would have been possible.
(This patch was ported from the HTTP::Headers git repo. )
The possiblity of the former behavior exploitably seems particular small
. Apache
won't even send out header that a space between the two required CRLFs.
0.11
- added 'sub isa' hack.
(suggested by miyagawa++)
0.10
- oops. I forgot to remove 'use Test::Warn' orz.
(reported by miyagawa++)
0.09
- no changes...
0.07
- don't depend to Test::Warn
0.06
- fixed bugs in test code.
0.05 doesn't works with older version of HTTP::Headers
0.05
- hmm... this module requires HTTP::Date
0.04
- added as_string_without_sort
0.03
- load Storable lazily. Storable doesn't needed in a lot of case.
0.02
- updated docs(by lestrrat++)
0.01 Tue Nov 11 01:16:13 2008
- original version