mirror of
https://github.com/php/php-src.git
synced 2025-08-15 13:38:49 +02:00
d65a1e6f91
multipart/form-data boundaries larger than the read buffer result in erroneous
parsing, which violates data integrity.
Limit boundary size, as allowed by RFC 1521:
Encapsulation boundaries [...] must be no longer than 70 characters, not
counting the two leading hyphens.
We correctly parse payloads with boundaries of length up to
FILLUNIT-strlen("\r\n--") bytes, so allow this for BC.
|
||
|---|---|---|
| .. | ||
| basic | ||
| classes | ||
| func | ||
| lang | ||
| output | ||
| run-test | ||
| security | ||
| strings | ||