mirror of
https://github.com/vee1e/mitmproxy.git
synced 2026-09-04 11:47:14 +00:00
This commit fixes GHSA-gcx2-gvj7-pxv3 by making mitmproxy reject header names that contain whitespace characters by default. A new `validate_inbound_headers` option is provided to turn this behavior off at the expense of allowing HTTP smuggling vulnerabilities. |
||
|---|---|---|
| .. | ||
| bench | ||
| examples | ||
| helper_tools | ||
| mitmproxy | ||
| release | ||
| __init__.py | ||
| conftest.py | ||
| filename_matching.py | ||
| full_coverage_plugin.py | ||
| individual_coverage.py | ||