Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RqHref.Base reads first line of header without checking format #445

Closed
HDouss opened this issue Nov 19, 2015 · 19 comments
Closed

RqHref.Base reads first line of header without checking format #445

HDouss opened this issue Nov 19, 2015 · 19 comments

Comments

@HDouss
Copy link
Contributor

HDouss commented Nov 19, 2015

org.takes.rq.RqHref.Base just reads first header and takes second element after space splitting :
this.head().iterator().next().split(" ", 3)[1]
It should check if the header format satisfies HTTP specifications.


- `445-5323c196`/#473 (by Vladimir Maximenko)
@davvd
Copy link

davvd commented Nov 23, 2015

@yegor256 take a look at this issue please and dispatch it somehow, see par.21

@yegor256 yegor256 added the bug label Dec 7, 2015
@yegor256
Copy link
Owner

yegor256 commented Dec 7, 2015

@HDouss seems to be a valid bug, thanks

@davvd
Copy link

davvd commented Dec 7, 2015

@HDouss attached this issue to milestone "1.0" (let me know if this is wrong)

@davvd davvd added this to the 1.0 milestone Dec 7, 2015
@davvd
Copy link

davvd commented Dec 8, 2015

@HDouss thanks for reporting! I topped your account for 15 mins, transaction 71676136

@davvd
Copy link

davvd commented Dec 14, 2015

@Happy-Neko could you please pick this up? This article explains how we work. Any technical questions you may ask right here

The cost of this task is 30 mins (this is exactly how much will be paid, not less not more), when the task is done

@davvd
Copy link

davvd commented Dec 19, 2015

@HDouss once 445-5323c196/#473 puzzle is resolved (later, in another ticket), this ticket will be fully complete

@HDouss
Copy link
Contributor Author

HDouss commented Dec 19, 2015

@davvd I should anyway close this issue, right ?

@HDouss
Copy link
Contributor Author

HDouss commented Dec 19, 2015

@Happy-Neko The pattern used assume that a "third part" of the request line is optional. I am not sure it is the case according to the specifications. The current implemented pattern will accept request lines like : GET HTTP/1.1 or GET /

@ikarsokolov
Copy link
Contributor

@HDouss Protocol part is required per HTTP 1.1 specs. It is optional if we want to maintain backward compatibility with HTTP 1.0.

@HDouss
Copy link
Contributor Author

HDouss commented Dec 19, 2015

@Happy-Neko Ok. Make sense.

@HDouss
Copy link
Contributor Author

HDouss commented Dec 19, 2015

@davvd I will close the issue as the PR is merged and accepted.

@HDouss HDouss closed this as completed Dec 19, 2015
@HDouss
Copy link
Contributor Author

HDouss commented Dec 19, 2015

@Happy-Neko Please make a reference to the PR id.

@ikarsokolov
Copy link
Contributor

@HDouss issue was fixed in PR #466

@HDouss
Copy link
Contributor Author

HDouss commented Dec 20, 2015

@Happy-Neko Thanks !

@davvd
Copy link

davvd commented Dec 21, 2015

@ypshenychka please, check this issue for QA compliance, as per par.24

@ypshenychka
Copy link

@davvd Quality is good here.

@davvd
Copy link

davvd commented Dec 21, 2015

@davvd Quality is good here.

@ypshenychka thank you

@davvd
Copy link

davvd commented Dec 21, 2015

@Happy-Neko 10 mins was added to the account of @ypshenychka (for QA review), in transaction 72638957; thanks, I just added 30 mins to your account, payment 72640289, 125 hours and 51 mins spent; added +30 to your rating, now it is equal to +30

@davvd
Copy link

davvd commented Feb 28, 2016

@HDouss last puzzled solved 445-5323c196/#473

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants