mirror of
https://github.com/valyala/fasthttp.git
synced 2026-06-14 15:56:44 +03:00
b4c0b2b47d
* Validate header values Fixes https://github.com/valyala/fasthttp/issues/1794 * Don't allow empty header keys And improve error handling for bad headers.
169 lines
3.8 KiB
Go
169 lines
3.8 KiB
Go
//go:build ignore
|
|
|
|
package main
|
|
|
|
import (
|
|
"bytes"
|
|
"fmt"
|
|
"log"
|
|
"os"
|
|
)
|
|
|
|
const (
|
|
toLower = 'a' - 'A'
|
|
)
|
|
|
|
func main() {
|
|
hex2intTable := func() [256]byte {
|
|
var b [256]byte
|
|
for i := 0; i < 256; i++ {
|
|
c := byte(16)
|
|
if i >= '0' && i <= '9' {
|
|
c = byte(i) - '0'
|
|
} else if i >= 'a' && i <= 'f' {
|
|
c = byte(i) - 'a' + 10
|
|
} else if i >= 'A' && i <= 'F' {
|
|
c = byte(i) - 'A' + 10
|
|
}
|
|
b[i] = c
|
|
}
|
|
return b
|
|
}()
|
|
|
|
toLowerTable := func() [256]byte {
|
|
var a [256]byte
|
|
for i := 0; i < 256; i++ {
|
|
c := byte(i)
|
|
if c >= 'A' && c <= 'Z' {
|
|
c += toLower
|
|
}
|
|
a[i] = c
|
|
}
|
|
return a
|
|
}()
|
|
|
|
toUpperTable := func() [256]byte {
|
|
var a [256]byte
|
|
for i := 0; i < 256; i++ {
|
|
c := byte(i)
|
|
if c >= 'a' && c <= 'z' {
|
|
c -= toLower
|
|
}
|
|
a[i] = c
|
|
}
|
|
return a
|
|
}()
|
|
|
|
quotedArgShouldEscapeTable := func() [256]byte {
|
|
// According to RFC 3986 §2.3
|
|
var a [256]byte
|
|
for i := 0; i < 256; i++ {
|
|
a[i] = 1
|
|
}
|
|
|
|
// ALPHA
|
|
for i := int('a'); i <= int('z'); i++ {
|
|
a[i] = 0
|
|
}
|
|
for i := int('A'); i <= int('Z'); i++ {
|
|
a[i] = 0
|
|
}
|
|
|
|
// DIGIT
|
|
for i := int('0'); i <= int('9'); i++ {
|
|
a[i] = 0
|
|
}
|
|
|
|
// Unreserved characters
|
|
for _, v := range `-_.~` {
|
|
a[v] = 0
|
|
}
|
|
|
|
return a
|
|
}()
|
|
|
|
quotedPathShouldEscapeTable := func() [256]byte {
|
|
// The implementation here equal to net/url shouldEscape(s, encodePath)
|
|
//
|
|
// The RFC allows : @ & = + $ but saves / ; , for assigning
|
|
// meaning to individual path segments. This package
|
|
// only manipulates the path as a whole, so we allow those
|
|
// last three as well. That leaves only ? to escape.
|
|
a := quotedArgShouldEscapeTable
|
|
|
|
for _, v := range `$&+,/:;=@` {
|
|
a[v] = 0
|
|
}
|
|
|
|
return a
|
|
}()
|
|
|
|
validHeaderFieldByteTable := func() [128]byte {
|
|
// Should match net/textproto's validHeaderFieldByte(c byte) bool
|
|
// Defined by RFC 7230 and 9110:
|
|
//
|
|
// header-field = field-name ":" OWS field-value OWS
|
|
// field-name = token
|
|
// tchar = "!" / "#" / "$" / "%" / "&" / "'" / "*" / "+" / "-" / "." /
|
|
// "^" / "_" / "`" / "|" / "~" / DIGIT / ALPHA
|
|
// token = 1*tchar
|
|
var table [128]byte
|
|
for c := 0; c < 128; c++ {
|
|
if (c >= '0' && c <= '9') ||
|
|
(c >= 'a' && c <= 'z') ||
|
|
(c >= 'A' && c <= 'Z') ||
|
|
c == '!' || c == '#' || c == '$' || c == '%' || c == '&' ||
|
|
c == '\'' || c == '*' || c == '+' || c == '-' || c == '.' ||
|
|
c == '^' || c == '_' || c == '`' || c == '|' || c == '~' {
|
|
table[c] = 1
|
|
}
|
|
}
|
|
return table
|
|
}()
|
|
|
|
validHeaderValueByteTable := func() [256]byte {
|
|
// Should match net/textproto's validHeaderValueByte(c byte) bool
|
|
// Defined by RFC 7230 and 9110:
|
|
//
|
|
// field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ]
|
|
// field-vchar = VCHAR / obs-text
|
|
// obs-text = %x80-FF
|
|
//
|
|
// RFC 5234:
|
|
//
|
|
// HTAB = %x09
|
|
// SP = %x20
|
|
// VCHAR = %x21-7E
|
|
var table [256]byte
|
|
for c := 0; c < 256; c++ {
|
|
if (c >= 0x21 && c <= 0x7E) || // VCHAR
|
|
c == 0x20 || // SP
|
|
c == 0x09 || // HTAB
|
|
c >= 0x80 { // obs-text
|
|
table[c] = 1
|
|
}
|
|
}
|
|
return table
|
|
}()
|
|
|
|
w := bytes.NewBufferString(pre)
|
|
fmt.Fprintf(w, "const hex2intTable = %q\n", hex2intTable)
|
|
fmt.Fprintf(w, "const toLowerTable = %q\n", toLowerTable)
|
|
fmt.Fprintf(w, "const toUpperTable = %q\n", toUpperTable)
|
|
fmt.Fprintf(w, "const quotedArgShouldEscapeTable = %q\n", quotedArgShouldEscapeTable)
|
|
fmt.Fprintf(w, "const quotedPathShouldEscapeTable = %q\n", quotedPathShouldEscapeTable)
|
|
fmt.Fprintf(w, "const validHeaderFieldByteTable = %q\n", validHeaderFieldByteTable)
|
|
fmt.Fprintf(w, "const validHeaderValueByteTable = %q\n", validHeaderValueByteTable)
|
|
|
|
if err := os.WriteFile("bytesconv_table.go", w.Bytes(), 0o660); err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
}
|
|
|
|
const pre = `package fasthttp
|
|
|
|
// Code generated by go run bytesconv_table_gen.go; DO NOT EDIT.
|
|
// See bytesconv_table_gen.go for more information about these tables.
|
|
|
|
`
|