From f0579313d31ac7fafe0f05ee55ecb305bc1cbe23 Mon Sep 17 00:00:00 2001 From: Profpatsch Date: Fri, 29 Jan 2021 16:35:02 +0100 Subject: fix(users/Profpatsch/read-http): actually parse ascii There might be exploits since we parsed the headers as utf8 even though we actually want to interpret them as ASCII. This fixes it, by using the ascii crate. Thanks to @sterni for noticing. Change-Id: I50b6a588d99b34e677cb22968cf0dfd8b331d11c Reviewed-on: https://cl.tvl.fyi/c/depot/+/2457 Reviewed-by: Profpatsch Tested-by: BuildkiteCI --- users/Profpatsch/read-http/default.nix | 1 + 1 file changed, 1 insertion(+) (limited to 'users/Profpatsch/read-http/default.nix') diff --git a/users/Profpatsch/read-http/default.nix b/users/Profpatsch/read-http/default.nix index 20f8675b3fd4..41fe1c7fedcc 100644 --- a/users/Profpatsch/read-http/default.nix +++ b/users/Profpatsch/read-http/default.nix @@ -6,6 +6,7 @@ let read-http = depot.users.Profpatsch.writers.rustSimple { name = "read-http"; dependencies = [ + depot.users.Profpatsch.rust-crates.ascii depot.users.Profpatsch.rust-crates.httparse depot.users.Profpatsch.netencode.netencode-rs depot.users.Profpatsch.arglib.netencode.rust -- cgit 1.4.1