Mutate breaks functionality of StrictFirewallHttpHeaders with recently modified HttpHeaders#writabeHttpHeaders #16069
Labels
in: web
An issue in web modules (web, webmvc)
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
Describe the bug
When request wrapped by StrictServerWebExchangeFirewall / StrictFirewallHttpRequest is mutated, header sanitization provided by StrictFirewallHttpHeaders is removed
This is due to fact that
Expected behavior
Mutated request should be protected by StrictFirewallHttpHeaders sanitization.
The text was updated successfully, but these errors were encountered: