[ruby-core:86450] [Ruby trunk Bug#14664] After upgrade to 2.4.4: header field value cannot include CR/LF

From: tietew@...
Date: 2018-04-04 09:13:13 UTC
List: ruby-core #86450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In This Thread

Prev Next