Verify that HTTP header fields are not empty.

nodejs · Oct 17, 2023 · cf6fcfe · cf6fcfe
1 parent 9ab2afc
commit cf6fcfe
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/llhttp/http.ts b/src/llhttp/http.ts
@@ -542,6 +542,7 @@ export class HTTP {
           }).otherwise(this.headersCompleted()),
         }, onInvalidHeaderFieldChar),
       )
+      .peek(':', p.error(ERROR.INVALID_HEADER_TOKEN, 'Empty header field'))
       .otherwise(span.headerField.start(n('header_field')));
 
     n('header_field')