Rob Fuller 094824bfd3 Case-insensitive content-type check ...

Was noticing that injection wasn't happening when the header was "Content-type" instead of the checked for "Content-Type". Headers could probably be put as .lower() from the beginning, but then again there might be header content that may break because of it.

2014-02-10 16:55:11 -05:00

90 KiB

Executable File

Raw Blame History

View Raw