Warning: This build has drifted.
The coverage report for this pull request build may be inaccurate because its base commit is no longer the HEAD of its target branch.
This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

    • Learn more: For more information on this, see Tracking coverage changes for pull request builds.
    • Fix now: For a quick fix, rebase this PR at GitHub. Your next report should be accurate.
    • Prevent going forward: To avoid this issue with future PRs, see these Recommended CI Configurations.

Ignore headers from body

The http_post transport erroneously unmarshalled the headers into the RawParams.
This would cause a malicious request body the possibility to add or alter
request headers before calling the resolvers.

Any resolvers that used the Headers from the OperationContext would be affected
by this.

Changed the order the params.Headers are set to avoid the issue. Also removed
the json attribute on Headers in RawParams so a refactor wouldn't reintroduce
the bug.

The tracing in the transport were also incorrectly placed. Moved them to right
before creating the OperationContext.