]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f44a8ae) | patch
rgw: sanitize \r in s3 CORSConfiguration's ExposeHeader
authorCasey Bodley <cbodley@redhat.com>
Tue, 4 May 2021 12:32:58 +0000 (08:32 -0400)
committerCasey Bodley <cbodley@redhat.com>
Tue, 11 May 2021 13:06:14 +0000 (09:06 -0400)
commit763aebb94678018f89427137ffbc0c5205b1edc1
treeb1200b0e644e40f8790e30209c694764a61ff9bbtree | snapshot
parentf44a8ae8aa27ecef69528db9aec220f12492810ecommit | diff
rgw: sanitize \r in s3 CORSConfiguration's ExposeHeader

follows up on 1524d3c0c5cb11775313ea1e2bb36a93257947f2 to escape \r as
well

Fixes: CVE-2021-3524
Reported-by: Sergey Bobrov <Sergey.Bobrov@kaspersky.com>
Signed-off-by: Casey Bodley <cbodley@redhat.com>
(cherry picked from commit 87806f48e7a1b8891eb90711f1cedd26f1119aac)
src/rgw/rgw_cors.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.