net/http/cgi: reject invalid header names
Being lenient on those has caused enough security issues. Spun out of CL 231419. Fixes #38889 Change-Id: Idd3bc6adc22e08a30b3dabb146ce78d4105684cd Reviewed-on: https://go-review.googlesource.com/c/go/+/232277 Reviewed-by:Brad Fitzpatrick <bradfitz@golang.org>
Loading
Please sign in to comment