Comment 4 for bug 1005921

Revision history for this message
Thierry Carrez (ttx) wrote :

Oops. I meant:

On the headers side, they should definitely be all quoted before being passed to http_connect, or all be unquoted and have http_connect quote them. So a bit more auditing here can't hurt.