tree 1bdaa3092fe0ed673cace25dcf1ddd74f423c24c
parent 64ef16e77795957d47e3889bca9483d6f3099bbf
author Damien Neil <dneil@google.com> 1655485785 -0700
committer Damien Neil <dneil@google.com> 1656541710 +0000

net/http: preserve nil values in Header.Clone

ReverseProxy makes a distinction between nil and zero-length header values.
Avoid losing nil-ness when cloning a request.

Thanks to Christian Mehlmauer for discovering this.

Fixes #53423
Fixes CVE-2022-32148

Change-Id: Ice369cdb4712e2d62e25bb881b080847aa4801f5
Reviewed-on: https://go-review.googlesource.com/c/go/+/412857
Reviewed-by: Ian Lance Taylor <iant@google.com>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>