Yusuke Endoh a041273a4c [ruby/net-http] Reject CR/LF in the address and port of a proxy CONNECT request ...

The CONNECT request line and its Host field were built from the address
and port without the CR/LF check that the other request components get.

Reported-by: Christiaan Swiers (https://hackerone.com/cswiers)

https://github.com/ruby/net-http/commit/a4af412951

Co-Authored-By: Claude Mythos 5.1 <noreply@anthropic.com>

2026-11-05 08:49:10 +00:00

..

test_buffered_io.rb

…

test_http_request.rb

…

test_http.rb

[ruby/net-http] Stop loading resolv from net/http

2026-10-14 03:58:10 +00:00

test_httpheader.rb

…

test_httpresponse.rb

[ruby/net-http] Don't use trailing spaces in test (https://github.com/ruby/net-http/pull/350)

2026-10-07 12:05:32 +09:00

test_httpresponses.rb

…

test_https_proxy.rb

[ruby/net-http] Reject CR/LF in the address and port of a proxy CONNECT request

2026-11-05 08:49:10 +00:00

test_https.rb

[ruby/net-http] test: refactor assert to pass with nil as well

2026-09-08 10:37:58 +00:00

utils.rb

…