qt6-base/debian/patches/cve-2023-32762.diff
Lisandro Damián Nicanor Pérez Meyer 8118e51999 Add a patch to fix CVE-2023-32762.
Yes, there was another CVE...
2023-05-22 11:40:25 -03:00

16 lines
555 B
Diff

---
src/network/access/qhsts.cpp | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/src/network/access/qhsts.cpp
+++ b/src/network/access/qhsts.cpp
@@ -328,7 +328,7 @@ bool QHstsHeaderParser::parse(const QLis
{
for (const auto &h : headers) {
// We use '==' since header name was already 'trimmed' for us:
- if (h.first == "Strict-Transport-Security") {
+ if (h.first.compare("Strict-Transport-Security", Qt::CaseInsensitive) == 0) {
header = h.second;
// RFC6797, 8.1:
//