mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
1d3720fb4e
It's possible to construct a request where the Host header differs from the authority in the URL, for example in an extension with nsIHttpChannel and setRequestHeader. MakeConnectString generates a host:port string for the CONNECT Request-Line, but peeks into the tunneled request in order to copy the Host header to the proxy request. Instead, use the same host:port string for Host as is used in the Request-URI, to avoid revealing the plaintext of the Host header outside of the tunnel. |
||
---|---|---|
.. | ||
about | ||
app | ||
data | ||
device | ||
file | ||
ftp | ||
http | ||
res | ||
rtsp | ||
viewsource | ||
websocket | ||
wyciwyg | ||
moz.build |