saulteafarmer/Stirling-PDF
1
0
Fork 0
mirror of https://github.com/Stirling-Tools/Stirling-PDF.git synced 2025-08-28 15:19:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Introduced protections against HTTP header injection / smuggling attacks

Browse Source
This commit is contained in:
pixeebot[bot] 2025-07-10 15:43:28 +00:00 committed by GitHub
parent 977f91b0bc
commit 7782407394
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
proprietary/src/main/java/stirling/software/proprietary/security/service/JWTService.java
View File

@ -1,5 +1,6 @@
package stirling.software.proprietary.security.service; package stirling.software.proprietary.security.service;
import io.github.pixee.security.Newlines;
import java.security.KeyPair; import java.security.KeyPair;
import java.util.Date; import java.util.Date;
import java.util.HashMap; import java.util.HashMap;
@ -150,7 +151,7 @@ public class JWTService implements JWTServiceInterface {
@Override @Override
public void addTokenToResponse(HttpServletResponse response, String token) { public void addTokenToResponse(HttpServletResponse response, String token) {
response.setHeader(AUTHORIZATION_HEADER, BEARER_PREFIX + token); response.setHeader(AUTHORIZATION_HEADER, Newlines.stripAll(BEARER_PREFIX + token));
ResponseCookie cookie = ResponseCookie cookie =
ResponseCookie.from(JWT_COOKIE_NAME, token) ResponseCookie.from(JWT_COOKIE_NAME, token)