mirror of
https://github.com/Grasscutters/mitmproxy.git
synced 2024-11-25 01:29:48 +00:00
b06fb6d157
This commit fixes GHSA-gcx2-gvj7-pxv3 by making mitmproxy reject header names that contain whitespace characters by default. A new `validate_inbound_headers` option is provided to turn this behavior off at the expense of allowing HTTP smuggling vulnerabilities. |
||
---|---|---|
.. | ||
bench | ||
examples | ||
helper_tools | ||
mitmproxy | ||
release | ||
__init__.py | ||
conftest.py | ||
filename_matching.py | ||
full_coverage_plugin.py | ||
individual_coverage.py |