Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tolerant applications #95

Open
EduardoRFS opened this issue May 24, 2021 · 2 comments
Open

Tolerant applications #95

EduardoRFS opened this issue May 24, 2021 · 2 comments

Comments

@EduardoRFS
Copy link

Currently httpaf doesn't accept HTTP requests using LF instead of CRLF. While this is not part of the specification it is a recommendation by the RFC below.

This doesn't blocks httpaf from working with netcat directly.

19.3 Tolerant Applications

https://www.w3.org/Protocols/rfc2616/rfc2616-sec19.html

@anmonteiro
Copy link
Owner

I'm tempted not to fix this one because of section 9.5 - request smuggling https://datatracker.ietf.org/doc/html/rfc7230#section-9.5

@EduardoRFS
Copy link
Author

httpaf is the outlier here, so if you're subject to differences of parsing, then not accepting \n only is actually worse.

Also it makes working with httpaf manually way more painful.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants