mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-11-12 03:28:54 -10:00
Fix GHSA-2gqc-mwv3-66rp: the WebSocket handshake parser accepted non-CRLF header separators, allowing forged proxy-injected identity headers. https://github.com/crossbario/autobahn-python/security/advisories/GHSA-2gqc-mwv3-66rp Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Julien Olivain <ju.o@free.fr>