tree c623103182af8161447152d11c1c94f5cb41532c
parent d34c0dbc17e61e9e7a15355e75b9578d7d024f52
author Brad Fitzpatrick <bradfitz@golang.org> 1548782556 +0000
committer Brad Fitzpatrick <bradfitz@golang.org> 1548794574 +0000

net/url, net/http: relax CTL-in-URL validation to only ASCII CTLs

CL 159157 was doing UTF-8 decoding of URLs. URLs aren't really UTF-8,
even if sometimes they are in some contexts.

Instead, only reject ASCII CTLs.

Updates #27302
Updates #22907

Change-Id: Ibd64efa5d3a93263d175aadf1c9f87deb4670c62
Reviewed-on: https://go-review.googlesource.com/c/160178
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Ian Lance Taylor <iant@golang.org>