Fix direct HTTP status sanitizer fallback

This commit is contained in:
udo
2026-05-21 10:19:43 +00:00
parent 41e9ca219f
commit 8b37e7ea1e
2 changed files with 8 additions and 3 deletions
+5 -3
View File
@@ -291,9 +291,11 @@ bool http_set_cookie_header_valid(String header)
String http_status_line_clean(String status_line)
{
if(status_line.find('\r') != String::npos || status_line.find('\n') != String::npos)
return("Status: 500 Internal Server Error");
return(status_line);
if(status_line.find('\r') == String::npos && status_line.find('\n') == String::npos)
return(status_line);
if(str_starts_with(status_line, "HTTP/"))
return("HTTP/1.1 500 Internal Server Error");
return("Status: 500 Internal Server Error");
}
namespace {