fix smuggling

cirospaciari · cirospaciari · commit b68e6402dd77 · 2025-05-08T22:43:29.000-07:00
diff --git a/packages/bun-uws/src/ChunkedEncoding.h b/packages/bun-uws/src/ChunkedEncoding.h
@@ -87,6 +87,11 @@ namespace uWS {
                         state &= ~STATE_IS_CHUNKED_EXTENSION;
                         break;
                     }
+                    if(data[0] <= 32) {
+                        state = STATE_IS_ERROR;
+                        return;
+                    }
+                    
                     data.remove_prefix(1);
                 }
             }

Original file line number	Diff line number	Diff line change
`@@ -87,6 +87,11 @@ namespace uWS {`
`87`	`87`	`state &= ~STATE_IS_CHUNKED_EXTENSION;`
`88`	`88`	`break;`
`89`	`89`	`}`
	`90`	`+ if(data[0] <= 32) {`
	`91`	`+ state = STATE_IS_ERROR;`
	`92`	`+ return;`
	`93`	`+ }`
	`94`	`+`
`90`	`95`	`data.remove_prefix(1);`
`91`	`96`	`}`
`92`	`97`	`}`