[TASK] Disallow multi-line HTTP headers 00/44900/2
authorHelmut Hummel <helmut.hummel@typo3.org>
Sun, 22 Nov 2015 13:00:52 +0000 (14:00 +0100)
committerMarkus Klein <markus.klein@typo3.org>
Thu, 26 Nov 2015 22:51:32 +0000 (23:51 +0100)
commit16012623c0c4916e656a97a6f401fd11fb837441
treecf1a6fb34ee6f550478d9a7b0bff99a55f57c415
parent8b37e9eb14ccf11c45555160c3b497198e812c96
[TASK] Disallow multi-line HTTP headers

PHP removed the support for this deprecated HTTP specification
in recent versions of PHP, thus we should remove these as well.

Besides that, we add an additional check for newlines
in GeneralUtility::locationHeaderUrl() to prevent potential
issues with Internet Explorer.
These lines can be removed once the minimum PHP requirement
are raised.

Releases: master, 6.2
Resolves: #58816
Change-Id: I38d26affd31913b82a972ac90ebf906a45b92e05
Reviewed-on: https://review.typo3.org/44900
Reviewed-by: Wouter Wolters <typo3@wouterwolters.nl>
Tested-by: Wouter Wolters <typo3@wouterwolters.nl>
Reviewed-by: Frank N├Ągler <frank.naegler@typo3.org>
Reviewed-by: Markus Klein <markus.klein@typo3.org>
Tested-by: Markus Klein <markus.klein@typo3.org>
typo3/sysext/core/Classes/Utility/GeneralUtility.php