]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bf06990) | patch
rgw: sanitize \r in s3 CORSConfiguration's ExposeHeader
authorCasey Bodley <cbodley@redhat.com>
Tue, 4 May 2021 12:32:58 +0000 (08:32 -0400)
committerCasey Bodley <cbodley@redhat.com>
Tue, 11 May 2021 13:04:29 +0000 (09:04 -0400)
commit4f078710d393fe36491e40a7fd607709e9fc2274
tree5fd2dadbca68b16675835c1027fb8b3e5ae1af93tree | snapshot
parentbf06990ab41d7ac299e4441ad9cd434e926a18e7commit | diff
rgw: sanitize \r in s3 CORSConfiguration's ExposeHeader

follows up on 1524d3c0c5cb11775313ea1e2bb36a93257947f2 to escape \r as
well

Fixes: CVE-2021-3524
Reported-by: Sergey Bobrov <Sergey.Bobrov@kaspersky.com>
Signed-off-by: Casey Bodley <cbodley@redhat.com>
(cherry picked from commit 87806f48e7a1b8891eb90711f1cedd26f1119aac)
src/rgw/rgw_cors.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.