mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-18 20:15:14 +02:00
new capacity bits (#67)
This commit is contained in:
parent
afaffc0df6
commit
7d0e7320e2
261 changed files with 10591 additions and 231 deletions
15
tests/fixtures/header_injection/python/safe_set_header.py
vendored
Normal file
15
tests/fixtures/header_injection/python/safe_set_header.py
vendored
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
# Safe: request arg routed through `strip_crlf` before being added to the
|
||||
# response headers.
|
||||
from flask import request, make_response
|
||||
|
||||
|
||||
def strip_crlf(raw):
|
||||
return raw.replace("\r", "").replace("\n", "")
|
||||
|
||||
|
||||
def handler():
|
||||
lang = request.args.get("lang")
|
||||
safe = strip_crlf(lang)
|
||||
resp = make_response("ok")
|
||||
resp.headers.add("X-Lang", safe)
|
||||
return resp
|
||||
Loading…
Add table
Add a link
Reference in a new issue