github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-22 11:21:47 +00:00
Code Issues Projects Releases Wiki Activity

[go1.15] apimachinery/pkg/util/proxy: Drop identity transfer-encoding

Browse Source 
ref: https://tip.golang.org/doc/go1.15#net/http

Parsing is now stricter as a hardening measure against request smuggling
attacks: non-ASCII white space is no longer trimmed like SP and HTAB,
and support for the "identity" Transfer-Encoding was dropped.

Signed-off-by: Stephen Augustus <saugustus@vmware.com>
This commit is contained in:
Stephen Augustus 2020-07-23 14:32:26 -04:00
parent 05ffc95347
commit 1171ae7153
1 changed files with 0 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
staging/src/k8s.io/apimachinery/pkg/util/proxy/upgradeaware_test.go
View File

@ -763,21 +763,6 @@ func TestProxyRequestContentLengthAndTransferEncoding(t *testing.T) {
expectedBody: sampleData, expectedBody: sampleData,
}, },
"content-length + identity transfer-encoding": {
reqHeaders: http.Header{
"Content-Length": []string{"5"},
"Transfer-Encoding": []string{"identity"},
},
reqBody: sampleData,
expectedHeaders: http.Header{
"Content-Length": []string{"5"},
"Content-Encoding": nil, // none set
"Transfer-Encoding": nil, // gets removed
},
expectedBody: sampleData,
},
"content-length + gzip content-encoding": { "content-length + gzip content-encoding": {
reqHeaders: http.Header{ reqHeaders: http.Header{
"Content-Length": []string{strconv.Itoa(len(zip(sampleData)))}, "Content-Length": []string{strconv.Itoa(len(zip(sampleData)))},