Fix the way the header length is determined
commit996d5dcabb08b49ef4c13bc93bcfe054b934a9f7
authorHans-Christian Esperer <hc@hcesperer.org>
dateTue 5 Jul 2016, 22:32 (10 years ago)
parent194b267
wai-extra/ChangeLog.md+4
@@ -1,3 +1,7 @@
1+## 3.0.16.1
2+
3+* Fix the way the header length is checked (for limiting the max header length)
4+
15## 3.0.16.0
26
37* Add a new function "parseRequestBodyEx" that allows various size limits to be set.
wai-extra/Network/Wai/Parse.hs+1−1
@@ -425,7 +425,7 @@ takeLine maxlen src =
425425 go front = do
426426 bs <- readSource src
427427 case maxlen of
428− Just maxlen' -> when (S.length front + S.length bs > maxlen') $
428+ Just maxlen' -> when (S.length front > maxlen') $
429429 error "Header line length exceeds allowed maximum."
430430 Nothing -> return ()
431431 if S.null bs
wai-extra/wai-extra.cabal+1−1
@@ -1,5 +1,5 @@
11Name: wai-extra
2−Version: 3.0.16.0
2+Version: 3.0.16.1
33Synopsis: Provides some basic WAI handlers and middleware.
44description:
55 Provides basic WAI handler and middleware functionality: