-
Bug
-
Resolution: Done
-
Major
-
7.1.5.GA
According to section 2.2.3 of RFC2822, headers may be folded at a whitespace character with a CRLF. Currently, MultipartParser considers the CRLF the end of the header value in all cases rather than checking for a whitespace character that signals the continuation of the value. This results in a MalformedMessageException to be thrown from the headerName method when the currentString (which now contains the remainder of the value) is checked to ensure it is null.
This behavior may be reproduced by simply creating a multi-line header for a request, for example:
{{Content-Disposition: form-data;
name="data";
filename="foo"}}
- incorporates
-
UNDERTOW-1237 MultipartParser doesn't properly handle multi-line headers
- Resolved
- is incorporated by
-
JBEAP-15370 (7.1.z) Upgrade undertow from 1.4.18.SP9 to 1.4.18.SP11
- Closed
- links to