moonbitlang / async

77%

main: 77%

LAST BUILD ON BRANCH fix/security-crlf-injection

branch: fix/security-crlf-injection

CHANGE BRANCH

x

Reset

Sync Branches

• fix/security-crlf-injection
• CI-check-test-programs
• CI-coverage-js
• CI-use-new-moon
• Guest0x0/aqueue-try-get
• HEAD
• IP-protocol-preference
• access-server-addr-via-field
• adapt-compiler-update
• adapt-language-update
• adapt-latest-release
• adapt-new-release
• add-CI
• add-leak-check
• alloc-dir-buffer-in-c
• allow-content-encoding
• android-openssl
• android-process
• android-tmpdir
• aqueue-close
• aqueue-readme
• async-bind
• async-queue
• async-test
• atomic_write
• bench
• better-msg-for-mingw
• block-sigchld
• block-sigpipe
• buffer-pool
• buffered-writer
• cancel-dont-crash-group
• cancel-open
• cancel-sync-io
• change-naming-convention
• change-spawn-loop-return-type
• check-cancel-before-IO
• cleanup-API
• cleanup-addr
• cleanup-deprecated
• cleanup-socket
• cleanup-test
• cleanup/io-stale-api-docs
• code-review--src-aqueue
• code-review--src-fs
• code-review--src-internal-bytes_util
• code-review--src-internal-c_buffer
• code-review--src-internal-fd_util
• code-review--src-internal-time
• code-review--src-io
• code-review--src-pipe
• code-review--src-process
• code-review--src-socket
• codex/add-fn-syntax
• codex/async-process
• codex/async-stdio-wasm
• codex/curl-argparse
• codex/examples-argparse
• codex/examples-callback-sugar
• codex/fd-util-pipe-runtime
• codex/fix-buffer-deprecations
• codex/fix-moon-format-info
• codex/fix-moon-stable-deprecations
• codex/fix-process-windows-exe-rewrite
• codex/http-server-file-example
• codex/process-run-checked
• codex/project-wide-callback-sugar
• codex/realpath-host-bindings
• codex/refactor-event-loop-backends
• codex/simplify-logger-write
• codex/simplify-write-string
• codex/socket-addr-wasm-offset
• codex/split-io-result-read-write
• codex/wasm-async-fs-host-upstream
• codex/wasm-async-socket
• codex/wasm-event-loop-timer
• codex/wasm-http-support
• codex/wasm-io-result-buffer-ownership
• codex/wasm-websocket-support
• codex/wasm1-fill-return-shims
• codex/wasm1-socket-buffers
• codex/wasm1-thread-pool-job-storage
• codex/wasm1-tls-return-buffers
• cond-var
• cond-var-readme
• debug
• debug-CI-failure
• debug-CI-timing
• debug-sanitizer-check
• defer
• deprecate-get-body
• deprecate-non-portable-API
• detect-pidfd-open-at-runtime
• dir-op
• disable-nagle
• dns-support
• enable-tests-in-readme
• enhance-aqueue
• enhance-process-cancellation
• enhance-protect-from-cancel
• enhance-readdir
• enhance-request
• enhance-server-example
• eq-meth
• evloop-hook
• faster-test
• fd-util
• feat/bench-docker
• feat/http-client-verify-param
• feat/ipv6
• feat/lazy-openssl
• feat/wasm-gc-promise-http
• feat/wasm-gc-timer-event-loop
• feature/valtype-more-types
• fetch-completed-job-in-batch
• file-lock
• fix-API
• fix-CI
• fix-MacOS-process
• fix-MacOS-timestamp-test
• fix-MacOS-version-detection
• fix-aqueue-cancel
• fix-aqueue-close
• fix-async-cancel
• fix-buffered-reader
• fix-bug
• fix-clang-warnings
• fix-context-message
• fix-dead-lock
• fix-deprecation-warning
• fix-error-handling
• fix-fd-leak
• fix-fmt-info
• fix-getaddrinfo-leak
• fix-gzip
• fix-happy-eyeball-fd-leak
• fix-http-body-length-not-presented
• fix-http-cookie-handling
• fix-http-empty-body
• fix-http-host-header
• fix-http-parser-eof-handling
• fix-http-passthrough
• fix-inotify-rm-handling
• fix-io-cancellation
• fix-io-pipe-cancel
• fix-job-lifetime
• fix-js-backend
• fix-js-fairness
• fix-kqueue-timeout
• fix-leak
• fix-macos
• fix-nightly-CI
• fix-nightly-warnings
• fix-os-string-decode-default-len
• fix-potential-data-lost
• fix-process
• fix-process-bugs
• fix-process-collect-output
• fix-process-wait-random-failure
• fix-readdir-errno
• fix-return-immediately
• fix-socket-equal
• fix-spawn-after-cancelled
• fix-spurious-wakeup
• fix-starvation
• fix-stdio
• fix-stdio-detach
• fix-timestamp-test
• fix-tls
• fix-tls-shutdown
• fix-unstable-CI
• fix-walk-ordering
• fix-warnings
• fix-warnings-2026-01-26
• fix-warnings-2026-01-27
• fix-warnings-in-examples
• fix-websocket-utf8-validation
• fix-windows-compilation
• fix-windows-handle-inheritance
• fix-windows-named-pipe-open
• fix-windows-process-handling
• fix-windows-realpath
• fix-windows-segfault
• fix-windows-shared-stdio
• fix-windows-starvation
• fix-windows-thread-cc
• fix-writer-write
• fix/http-host-authority
• fix/websocket-unaligned-mask-write
• forbid-concurrent-readdir
• fs-timestamp
• fs-util
• fs-walk-filter
• fs-watch
• fs-watch-events
• fs-watch-fix-cancel
• fs-watch-ignore-path
• fs-watch-wait-any
• getsockname
• global-signal-handler
• group-scoped-defer
• gzip-compression
• haoxiang/http2
• hongbo/add_examples
• hongbo/async_doc
• hongbo/c_buffer_docs
• hongbo/docs
• hongbo/fix_warnings
• hongbo/fs_string_view
• hongbo/helpful_oserror
• hongbo/io_buffer_docs_only
• hongbo/io_docs
• hongbo/next_package_doc
• hongbo/process_packages
• hongbo/stable_test_output
• hongbo/timestamp_test_is_unstable
• hongbo/tweak
• hongbo/tweak_aqueue
• hongbo/tweaks
• http
• http-allow-double-close
• http-client
• http-content-length
• http-empty-body
• http-proxy
• http-server
• http-streaming-api
• ignore-special-headers
• improve-buffered-reader
• improve-ws-error
• in-memory-reader
• io-abstraction
• io-pipe
• issues128
• js-CI-deny-warn
• js-backend-basic
• js-fetch
• lazy-init
• less-API-inconsistency
• lift-examples
• link-and-chmod
• main
• make-fd-abstract
• migrate-to-new-syntax
• misc-bug-fix
• mkdir
• modify-fs-api
• modify-http-api
• modify-with-timeout
• moon-pkg
• more-examples
• more-file-op
• more-fs-util
• move-timer-to-runtime
• mutex
• named-pipe
• no-alloc-in-c-stub
• no-c-buffer-slice
• no-remote-server-dep
• no-slice-in-watcher
• one-writer
• opendir-async
• optimize
• optimize-gzip
• optimize-gzip-encoder
• optimize-http
• optional-permission
• organize-event-loop-code
• orphan-process
• os-error-predicate
• os-string
• panic-on-bad-spawn
• perf/read-file-regular-fast-path
• pidfd-constant
• poll-wait-handle-EINTR
• port-in-url
• pr-event-loop-empty-timer
• pr-gzip-crc32-index-loop
• pr-http-update-or-default
• pr-wasm-gc-shim
• pread-instead-of-seek
• process
• process-CREATE_NO_WINDOW
• process-accept-view
• process-cwd
• process-helper
• process-spawn-in-group
• promote-20260310
• promote-20260512
• promote-20260529
• promote-20260608
• promote-20260622
• promote-20260629
• raw-fd
• raw-fd-stream
• reader-read-some
• realpath
• recursive-mkdir
• refactor-UDP-API
• refactor-code-organization
• refactor-dir
• refactor-event-loop
• refactor-event-loop-process
• refactor-fs
• refactor-fstat
• refactor-job-id
• refactor-job-object
• refactor-layout
• refactor-open-flags
• refactor-pipe
• refactor-process-env
• refactor-runtime
• refactor-stdio
• refactor-thread-pool
• refactor-wasm-code
• refactor-windows-accept
• refactor/io-byte-oriented-api
• refine-API
• refine-TCP-API
• refine-callback-sugar-use
• refine-process-API
• refine-process-redirect-API
• remove-IS_WINDOWS
• remove-dead-code
• remove-set-blocking
• remove-unused-param
• remove-zero-padding
• rename
• rename-replace-behavior
• retry-error-filter
• reuse-addr
• runtime-use-string
• schannel-tls-server-cert-file
• seek-should-be-async
• semaphore
• semaphore-readme
• server-helper
• simplify-any
• simplify-code
• simplify-core-alias
• simplify-tls
• simplify-websocket
• socket-get-fd
• spawn-loop
• ssl-custom-root
• stat-no-follow
• stdio-blocking
• stdio-cancel
• stdio-no-crash
• stdio-output-write-string
• tcp_keep_alive
• test-macos-14
• test-random-port
• text-file-util
• thread-pool
• tighten-internal-apis
• timer
• tls
• tls-channel-binding
• tls-error
• tls-get-certificate
• tls-sni
• tmpdir
• try-fix-CI-hang
• try-indirect-dep
• try-poll-on-busy
• tweak-API
• type-check-on-wasm
• udp-multicast
• udp-no-inherit
• unimplemented-skip-coverage
• update-examples-deps
• update-fmt
• update-syntax
• use-native-rate-limit
• use-nightly-CI
• use-stdlib-API
• utilize-struct-constructor
• utilize-trait-optional
• v6-address-scope-id
• walk-fs
• websocket-ping
• windows-access
• windows-command-line-no-quote
• windows-coverage
• windows-fix-calling-convention
• windows-fs-always-thread
• windows-handle-should-be-pointer
• windows-kill-child-on-exit
• windows-reuse-addr
• windows-sanitizer-check
• windows-suffix-case-insensitive
• windows-support
• windows-support-execute-com
• windows-support-open-sync-flag
• windows-symlink-create-junction
• worktree-android
• write-string
• zero-aqueue
• zihang/async-util
• zihang/feat-workspace
• zihang/websocket

Build # 825

Build Type

Pull #494

github

Committed by web-flow

Commit Message

Merge 8ba731dc5 into 60f238393

Pull Request Pull Request #494: fix: sanitize HTTP headers to prevent CRLF injection (CWE-113)

Coverage Stats

8 of 12 new or added lines in 1 file covered. (66.67%)

3691 of 4779 relevant lines covered (77.23%)

11882.51 hits per line