Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-12-02 10:00:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

bug 1022195 - http2 allow indexing of cookie crumbs with decent entropy r=hurley

Browse Source 
--HG--
extra : rebase_source : fb48d4aaf4d81007ac5532f493a87babb23257f7
This commit is contained in:
Patrick McManus 2014-06-07 11:54:38 -04:00
parent edb88482f8
commit 6e06b87dfa
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
netwerk/protocol/http/Http2Compression.cpp
View File

@ -1062,10 +1062,12 @@ Http2Compressor::EncodeHeaderBlock(const nsCString &nvInput,
}
nsDependentCSubstring cookie = Substring(beginBuffer + nextCookie,
beginBuffer + semiSpaceIndex);
ProcessHeader(nvPair(name, cookie), true);
// cookies less than 20 bytes are not indexed
ProcessHeader(nvPair(name, cookie), name.Length() < 20);
nextCookie = semiSpaceIndex + 2;
}
} else {
// allow indexing of every non-cookie except authorization
ProcessHeader(nvPair(name, value), name.EqualsLiteral("authorization"));
}
}