Fixed non-ASCII characters in Server Timing headers

Fixes #48
This commit is contained in:
Andrey Savchenko committed 2020-11-16 16:17:03 +02:00
1 parent ccf3ff3738
commit 8875774ddb
3 files changed
+8 -2

No files matched your search

+2 -1
View File
@@ -68,7 +68,8 @@ class Server_Timing_Manager {
}
}
header( 'Server-Timing: ' . preg_replace( '/\R/', '', $header ) );
// Sanitize to visible US ASCII character range (32-126).
header( 'Server-Timing: ' . preg_replace( '/[^\x20-\x7E]/', '', $header ) );
return $input;
}