Skip to content

Match exact Content-Length headers - #148

Open
OskarEichler wants to merge 1 commit into
mtsmfm:mainfrom
OskarEichler:audit/exact-content-length-header
Open

Match exact Content-Length headers#148
OskarEichler wants to merge 1 commit into
mtsmfm:mainfrom
OskarEichler:audit/exact-content-length-header

Conversation

@OskarEichler

Copy link
Copy Markdown
Contributor

Summary

Require Content-Length to appear as a complete header line instead of accepting the token inside another header name.

Reproduction

A frame containing X-Content-Length is currently accepted as if it supplied Content-Length. The focused external model fails on 3.17.0.6 and current main, then passes with this change by raising ArgumentError for a missing or invalid header.

Verification

  • Existing suite: 6 runs, 11 assertions, zero failures
  • Focused malformed-header model passes
  • All Ruby syntax checks pass
  • Steep passes
  • Generated source remains clean
  • Rebuilt gem preserves expected package contents
  • RuboCop LSP initialize/shutdown integration passes
  • Rails 8.1.3.1 loads the candidate

No tests were changed. This source-only patch was identified and verified during an AI-assisted dependency audit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant