Re: [PHP-DEV] Disallow newlines in CURLOPT_HTTPHEADER

Hi

On 2026-07-13 13:00, Sjoerd Langkemper wrote:
> I asked Daniel Stenberg about whether newlines are allowed in headers, 
> and he said:
> 
>> The documentation says in clear terms:
>> 
>>    The headers included in the linked list must not be CRLF-terminated
>> 
>> I believe libcurl might change its treatment of them in a future and 
>> start
>> returning error earlier when such octets are found.

Thank you. Did you ask in any publicly logged location (i.e. not IRC) so 
that you can provide a link for reference?

Though I'm also seeing https://github.com/curl/curl/pull/22309, which I 
think concludes the question.

Best regards
Tim Düsterhus