-
Notifications
You must be signed in to change notification settings - Fork 10.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow non-ASCII characters in response header values #4727
Comments
@davidfowl this doesn't seem as urgent as the app has control of the response headers. Punting to 3.0. |
Seems fine. |
Any chance this can get some airtime? Not exactly conforming to HTTP spec. IIS supports these chars. We have a load balancer running inside kestrel and are not exactly in control of response header creation. It's a bit unfortunate to have to alter non-ascii chars. |
We are having issues with this now. Our SSO provider inserts LDAP data into a header, and the LDAP data contains non-ASCII characters that are user's name (ex. Görkem) It's hard to get resolution on this since only applications on Kestrel are having issues with these headers. All other applications are either processing it successfully or ignoring it. |
We need an API proposal, this wouldn't be on by default. It's also up for grabs so can be implemented by anyone that needs it once the design and API are approved. |
We expect this to be a problem for proxy scenarios. Bumping out of backlog for re-triage. |
Following up for aspnet/KestrelHttpServer#1144. We may want to allow UTF-8 characters in response header values now to parallel our acceptance of UTF-8 characters in request header values. Note that the app has some degree of control over the response headers and their values.
The text was updated successfully, but these errors were encountered: