Skip to content

Commit

Permalink
Reduce ambiguity of headers
Browse files Browse the repository at this point in the history
  • Loading branch information
evanphx committed May 21, 2020
1 parent eeff566 commit ad8197e
Show file tree
Hide file tree
Showing 3 changed files with 37 additions and 2 deletions.
4 changes: 3 additions & 1 deletion ext/puma_http11/http11_parser.c
Expand Up @@ -14,12 +14,14 @@

/*
* capitalizes all lower-case ASCII characters,
* converts dashes to underscores.
* converts dashes to underscores, and underscores to commas.
*/
static void snake_upcase_char(char *c)
{
if (*c >= 'a' && *c <= 'z')
*c &= ~0x20;
else if (*c == '_')
*c = ',';
else if (*c == '-')
*c = '_';
}
Expand Down
4 changes: 3 additions & 1 deletion ext/puma_http11/http11_parser.rl
Expand Up @@ -12,12 +12,14 @@

/*
* capitalizes all lower-case ASCII characters,
* converts dashes to underscores.
* converts dashes to underscores, and underscores to commas.
*/
static void snake_upcase_char(char *c)
{
if (*c >= 'a' && *c <= 'z')
*c &= ~0x20;
else if (*c == '_')
*c = ',';
else if (*c == '-')
*c = '_';
}
Expand Down
31 changes: 31 additions & 0 deletions lib/puma/server.rb
Expand Up @@ -564,6 +564,37 @@ def handle_request(req, lines)
}
end

# Fixup any headers with , in the name to have _ now. We emit
# headers with , in them during the parse phase to avoid ambiguity
# with the - to _ conversion for critical headers. But here for
# compatibility, we'll convert them back. This code is written to
# avoid allocation in the common case (ie there are no headers
# with , in their names), that's why it has the extra conditionals.

to_delete = nil
to_add = nil

env.each do |k,v|
if k.start_with?("HTTP_") and k.include?(",") and k != "HTTP_TRANSFER,ENCODING"
if to_delete
to_delete << k
else
to_delete = [k]
end

unless to_add
to_add = {}
end

to_add[k.gsub(",", "_")] = v
end
end

if to_delete
to_delete.each { |k| env.delete(k) }
env.merge! to_add
end

# A rack extension. If the app writes #call'ables to this
# array, we will invoke them when the request is done.
#
Expand Down

0 comments on commit ad8197e

Please sign in to comment.