The Go programming language
Go to file
Brad Fitzpatrick 8f42967124 [release-branch.go1.4] net/textproto: don't treat spaces as hyphens in header keys
This was originally done in https://codereview.appspot.com/5690059
(Feb 2012) to deal with bad response headers coming back from webcams,
but it presents a potential security problem with HTTP request
smuggling for request headers containing "Content Length" instead of
"Content-Length".

Part of overall HTTP hardening for request smuggling. See RFC 7230.

Thanks to Régis Leroy for the report.

Change-Id: I92b17fb637c9171c5774ea1437979ae2c17ca88a
Reviewed-on: https://go-review.googlesource.com/11772
Reviewed-by: Russ Cox <rsc@golang.org>
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-on: https://go-review.googlesource.com/14249
Reviewed-by: Andrew Gerrand <adg@golang.org>
2015-09-22 06:39:39 +00:00
api [release-branch.go1.4] api: create go1.4.txt 2014-12-10 11:07:40 +11:00
doc [release-branch.go1.4] doc: document Go 1.4.2 2015-02-18 03:43:35 +00:00
include liblink: require DATA lines to be ordered by offset, with no overlap 2014-10-14 23:25:12 -04:00
lib [release-branch.go1.4] codereview: add release-branch.go1.4 prefix, like for dev branches 2014-12-05 15:27:48 -05:00
misc misc/makerelease: handle git sub-repositories 2014-12-10 13:04:06 +11:00
src [release-branch.go1.4] net/textproto: don't treat spaces as hyphens in header keys 2015-09-22 06:39:39 +00:00
test [release-branch.go1.4] runtime: don't return a slice with nil ptr but non-zero len from growslice 2015-09-22 06:36:57 +00:00
.gitattributes [release-branch.go1.4] all: copy master .gitattributes and .gitignore 2015-01-14 06:13:56 +00:00
.gitignore [release-branch.go1.4] all: copy master .gitattributes and .gitignore 2015-01-14 06:13:56 +00:00
.hgignore .hgignore: delete some dregs 2014-09-25 17:30:12 -07:00
.hgtags tag go1.4beta1 2014-10-30 12:33:57 +11:00
AUTHORS A+C: add another email address for Emil Hessman 2014-11-12 10:01:23 -08:00
CONTRIBUTORS C: add Nick Cooper (Google CLA). 2014-11-14 17:03:17 +11:00
LICENSE
PATENTS
README README: Fix installation instructions 2013-11-20 13:47:37 -08:00
VERSION [release-branch.go1.4] go1.4.2 2015-02-18 04:24:51 +00:00
favicon.ico godoc: update favicon 2012-10-11 17:02:36 +11:00
robots.txt

README

This is the source code repository for the Go programming language.  

For documentation about how to install and use Go,
visit http://golang.org/ or load doc/install-source.html
in your web browser.

After installing Go, you can view a nicely formatted
doc/install-source.html by running godoc --http=:6060
and then visiting http://localhost:6060/doc/install/source.

Unless otherwise noted, the Go source files are distributed
under the BSD-style license found in the LICENSE file.

--

Binary Distribution Notes

If you have just untarred a binary Go distribution, you need to set
the environment variable $GOROOT to the full path of the go
directory (the one containing this README).  You can omit the
variable if you unpack it into /usr/local/go, or if you rebuild
from sources by running all.bash (see doc/install.html).
You should also add the Go binary directory $GOROOT/bin
to your shell's path.

For example, if you extracted the tar file into $HOME/go, you might
put the following in your .profile:

    export GOROOT=$HOME/go
    export PATH=$PATH:$GOROOT/bin

See doc/install.html for more details.