arturobernalg opened a new pull request, #639:
URL: https://github.com/apache/httpcomponents-core/pull/639

   urrent code uses `Integer.parseInt(statusText)`, which accepts 
non-conformant values such as "+200" and "0200" (both parse to 200) even though 
:status must carry an HTTP status code.
   
   RFC 9110: [Status 
Codes](https://www.rfc-editor.org/rfc/rfc9110.html#name-status-codes) The 
status code of a response is a three-digit integer code that describes the 
result of the request and the semantics of the response, including whether the 
request was successful and what content is enclosed (if any). All valid status 
codes are within the range of 100 to 599, inclusive
   
   RFC 9113 8.3.2 - [Response Pseudo-Header 
Fields](https://www.rfc-editor.org/rfc/rfc9113.html#name-response-pseudo-header-fiel)
 This pseudo-header field MUST be included in all responses, including interim 
responses; otherwise, the response is malformed (Section 8.1.1).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to