Skip to content

v1.2.1

Choose a tag to compare

@rasuvaeff rasuvaeff released this 01 Aug 22:43
· 20 commits to master since this release
ecc01c8
  • Reject trailing newlines in Retry-After delta-seconds parsing: anchor the
    digit pattern in RetryAfterParser with \z instead of $ (PCRE $
    matches before a trailing \n, which let "120\n" parse as 120s instead of
    falling through to HTTP-date parsing). Hygiene fix: the surrounding (int)
    cast masked the smuggling for delta-seconds, but the trailing newline still
    produced a different parse path than a clean value.