Re: [PHP-DEV] Disallow newlines in CURLOPT_HTTPHEADER
[email protected] ("Matteo Beccati") Mon, 27 Jul 2026 12:12:40 +0200
| Newsgroups | php.internals |
|---|---|
| Message-ID | <[email protected]> |
--9f8d66593b60c5704603c990f82da2c522bee419 Content-Type: text/plain Content-Transfer-Encoding: 7bit Hi Sjoerd, On Mon, 27 Jul 2026, at 11:21, Sjoerd Langkemper wrote: > Given that Daniel Stenberg has said that newlines are not permitted, and is currently developing a pull request to reject them, does this change your view on whether PHP should reject newlines in headers passed to curl? Do you think I still need an RFC for this functionality? My point of view is that libcurl will eventually take care of it. No pressing need to do anything on our side. Cheers -- Matteo Beccati --9f8d66593b60c5704603c990f82da2c522bee419 Content-Type: text/html Content-Transfer-Encoding: 7bit <!DOCTYPE html><html><head><title></title></head><body><div>Hi Sjoerd,<br></div><div><br></div><div>On Mon, 27 Jul 2026, at 11:21, Sjoerd Langkemper wrote:</div><blockquote type="cite" id="qt" style=""><div>Given that Daniel Stenberg has said that newlines are not permitted, and is currently developing a pull request to reject them, does this change your view on whether PHP should reject newlines in headers passed to curl? Do you think I still need an RFC for this functionality?</div></blockquote><div><br></div><div>My point of view is that libcurl will eventually take care of it. No pressing need to do anything on our side.</div><div><br></div><div><br></div><div>Cheers</div><div>-- </div><div>Matteo Beccati</div></body></html> --9f8d66593b60c5704603c990f82da2c522bee419--