Skip to content

fix(node-adapter): harden Node adapter request parsing#188

Merged
benbrandt merged 1 commit into
mainfrom
more-http-hardening
Jun 18, 2026
Merged

fix(node-adapter): harden Node adapter request parsing#188
benbrandt merged 1 commit into
mainfrom
more-http-hardening

Conversation

@benbrandt

Copy link
Copy Markdown
Member

Handle mixed string and binary request body chunks without corrupting
UTF-8 decoder state. Empty string chunks preserve pending decoder state,
while non-empty string chunks flush before appending to keep stream
order intact.

Sanitize invalid Host headers before constructing forwarded Request URLs
while preserving valid hosts that URL parsing canonicalizes.

Handle mixed string and binary request body chunks without corrupting
UTF-8 decoder state. Empty string chunks preserve pending decoder state,
while non-empty string chunks flush before appending to keep stream
order intact.

Sanitize invalid Host headers before constructing forwarded Request URLs
while preserving valid hosts that URL parsing canonicalizes.
@benbrandt benbrandt changed the title fix: harden Node adapter request parsing fix(node-adapter): harden Node adapter request parsing Jun 18, 2026
@benbrandt benbrandt enabled auto-merge (squash) June 18, 2026 14:23
@benbrandt benbrandt merged commit 220eae6 into main Jun 18, 2026
6 checks passed
@benbrandt benbrandt deleted the more-http-hardening branch June 18, 2026 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant