Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
G
Grpc
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Container Registry
Model registry
Operate
Environments
Monitor
Incidents
Service Desk
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
tci-gateway-module
Grpc
Commits
d3a2d40b
Commit
d3a2d40b
authored
9 years ago
by
Jorge Canizales
Browse files
Options
Downloads
Patches
Plain Diff
Disallow NSString headers with -bin suffix
parent
b9692ca8
No related branches found
No related tags found
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
src/objective-c/GRPCClient/private/NSDictionary+GRPC.m
+13
-0
13 additions, 0 deletions
src/objective-c/GRPCClient/private/NSDictionary+GRPC.m
with
13 additions
and
0 deletions
src/objective-c/GRPCClient/private/NSDictionary+GRPC.m
+
13
−
0
View file @
d3a2d40b
...
...
@@ -75,6 +75,19 @@
}
-
(
void
)
grpc_initMetadata
:(
grpc_metadata
*
)
metadata
withKey
:(
NSString
*
)
key
{
if
([
key
hasSuffix
:
@"-bin"
])
{
// Disallow this, as at best it will confuse the server. If the app really needs to send a
// textual header with a name ending in "-bin", it can be done by removing the suffix and
// encoding the NSString as a NSData object.
//
// Why raise an exception: In the most common case, the developer knows this won't happen in
// their code, so the exception isn't triggered. In the rare cases when the developer can't
// tell, it's easy enough to add a sanitizing filter before the header is set. There, the
// developer can choose whether to drop such a header, or trim its name. Doing either ourselves,
// silently, would be very unintuitive for the user.
[
NSException
raise
:
NSInvalidArgumentException
format:
@"Metadata keys ending in '-bin' are reserved for NSData values."
];
}
// TODO(jcanizales): Encode Unicode chars as ASCII.
metadata
->
key
=
key
.
UTF8String
;
metadata
->
value
=
self
.
UTF8String
;
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment