]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw: sanitize \r in s3 CORSConfiguration's ExposeHeader
authorCasey Bodley <cbodley@redhat.com>
Tue, 4 May 2021 12:32:58 +0000 (08:32 -0400)
committerCasey Bodley <cbodley@redhat.com>
Tue, 11 May 2021 13:06:14 +0000 (09:06 -0400)
commit763aebb94678018f89427137ffbc0c5205b1edc1
treeb1200b0e644e40f8790e30209c694764a61ff9bb
parentf44a8ae8aa27ecef69528db9aec220f12492810e
rgw: sanitize \r in s3 CORSConfiguration's ExposeHeader

follows up on 1524d3c0c5cb11775313ea1e2bb36a93257947f2 to escape \r as
well

Fixes: CVE-2021-3524
Reported-by: Sergey Bobrov <Sergey.Bobrov@kaspersky.com>
Signed-off-by: Casey Bodley <cbodley@redhat.com>
(cherry picked from commit 87806f48e7a1b8891eb90711f1cedd26f1119aac)
src/rgw/rgw_cors.cc