Skip to content

security: fix URL truncation issue#144

Open
fantix wants to merge 1 commit into
masterfrom
t142-url-truncation
Open

security: fix URL truncation issue#144
fantix wants to merge 1 commit into
masterfrom
t142-url-truncation

Conversation

@fantix
Copy link
Copy Markdown
Member

@fantix fantix commented May 25, 2026

Fixes #142

@fantix
Copy link
Copy Markdown
Member Author

fantix commented May 25, 2026

@Kludex I feel like this would be an acceptable patch to stop the bleeding for now? (In the long run, we should migrate away from the no-longer-maintained http-parser and land one of the Rust approaches)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security: parse_url() truncates oversized URL fields due to uint16_t offsets/lengths in vendored http-parser

1 participant