On Mon, Jul 13, 2026, at 15:27, Tim Düsterhus wrote: > Though I'm also seeing https://github.com/curl/curl/pull/22309, which I > think concludes the question. Interesting, thanks. That PR adds a check for newlines in curl. So that makes it clear that headers are really not supposed to have newlines. But if curl checks this perhaps a check in PHP is not really adding anything. It could offer better error messages, and include the check even when someone is using an older curl. Would it still be valuable to include the newline check in PHP?
> > I asked Daniel Stenberg about whether newlines are allowed in headers, > Did you ask in any publicly logged location so > that you can provide a link for reference? No. I emailed him. Regards, Sjoerd
