hyperium / http

Rust HTTP types
Apache License 2.0
1.12k stars 283 forks source link

fix: HeaderName::from_lowercase allowing NUL bytes in some cases #684

Closed seanmonstar closed 4 months ago

seanmonstar commented 4 months ago

If a byte slice larger than 64 bytes is passed to HeaderName::from_lowercase, it could allow NUL bytes. This fixes the bug.

Reported-by: squirrel8@email.cz