# HG changeset patch # User jbe # Date 1426788786 -3600 # Node ID 1e6cf8d0e758c9ee6da6452cdd69dd331451d11b # Parent ac37c1f28d71ee358883eb8026dfc3f7ebdd64b9 Bugfix: Don't read request body when sending (minimalistic) error response due to malformed requests, etc. diff -r ac37c1f28d71 -r 1e6cf8d0e758 moonbridge_http.lua --- a/moonbridge_http.lua Thu Mar 19 19:12:31 2015 +0100 +++ b/moonbridge_http.lua Thu Mar 19 19:13:06 2015 +0100 @@ -822,6 +822,7 @@ -- sends a minimalistic error response and enforces closing of the -- connection and returns the boolean value "survive" local function error_response(...) + request:defer_reading() -- don't read request body (because of possibly invalid state) request:send_status(status) request:send_header("Content-Type", "text/plain") request:send_header("Connection", "close")