Filippo Valsorda 950fa11c4c net/http/httputil: always remove hop-by-hop headers ... Previously, we'd fail to remove the Connection header from a request like this: Connection: Connection: x-header Fixes #46313 Fixes CVE-2021-33197 Change-Id: Ie3009e926ceecfa86dfa6bcc6fe14ff01086be7d Reviewed-on: https://go-review.googlesource.com/c/go/+/321929 Run-TryBot: Filippo Valsorda <filippo@golang.org> Reviewed-by: Katie Hockman <katie@golang.org> Trust: Katie Hockman <katie@golang.org> Trust: Filippo Valsorda <filippo@golang.org> TryBot-Result: Go Bot <gobot@golang.org>		2021-05-27 15:00:58 +00:00
..
dump.go	net/http/httputil: fix deadlock in DumpRequestOut	2021-01-06 15:02:50 +00:00
dump_test.go	all: fix spellings	2021-04-10 01:46:41 +00:00
example_test.go	all: update references to symbols moved from io/ioutil to io	2020-10-20 18:41:18 +00:00
httputil.go	http/internal: document final CRLF behavior on chunkedWriter	2018-07-17 02:23:17 +00:00
persist.go	net: correct docs of KeepAlive field in Dialer type	2019-04-29 16:49:52 +00:00
reverseproxy.go	net/http/httputil: always remove hop-by-hop headers	2021-05-27 15:00:58 +00:00
reverseproxy_test.go	net/http/httputil: always remove hop-by-hop headers	2021-05-27 15:00:58 +00:00