fizruk / http-api-data

Converting to/from HTTP API data like URL pieces, headers and query parameters.
http://hackage.haskell.org/package/http-api-data
Other
52 stars 42 forks source link

Prevent HashDOS #138

Open avanov opened 5 months ago

avanov commented 5 months ago

Addresses #116 by removing the HashMap implementation entirely. It's done under the assumption that a library aiming at handling http data is always exposed to untrusted input, and hence there are no "safe" use cases for HashMap in its current vulnerable form.