Commit Graph

1 Commits

Author SHA1 Message Date
Jarek Prokop
070d6a38cc Fix HTTP response splitting in CGI.
Backported from upstream Ruby 2.7.7, commit:
<7cf697179d>

Test "CGICookieTest#test_cgi_cookie_new_with_domain" was adjusted to
deal with Ruby 2.5 not allowing String as key with double splat operator.

Resolves: CVE-2021-33621
2023-06-22 15:19:31 +02:00