search

nodejs / http-parser

http request/response parser for c
MIT License
6.32k stars 1.53k forks source link

http: unset `F_CHUNKED` on new `Transfer-Encoding` (Fixes CVE-2020-8287) #530

Open jellelicht opened 3 years ago

jellelicht commented 3 years ago

This change has only been integrated with the bundled version of http-parser in the node sources;

https://github.com/nodejs/node/commit/fc70ce08f5818a286fb5899a1bc3aff5965a745e

Can it please be synced here, with a release being made as well?