tree b59eac49f83dde0b5ffc7a1b63519ee29b9050af
parent bd0449f8d16a5ac1b1962c7ea07d764a7f18eca7
author Brad Fitzpatrick <bradfitz@golang.org> 1548965832 +0000
committer Brad Fitzpatrick <bradfitz@golang.org> 1549050730 +0000

[release-branch.go1.10] net/http, net/url: reject control characters in URLs

Cherry pick of combined CL 159157 + CL 160178.

Fixes #29922
Updates #27302
Updates #22907

Change-Id: I6de92c14284595a58321a4b4d53229285979b872
Reviewed-on: https://go-review.googlesource.com/c/160678
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Ian Lance Taylor <iant@golang.org>