Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / untmp / whidbey / QFE / ndp / fx / src / xsp / System / Web / HttpResponseHeader.cs / 3 / HttpResponseHeader.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- /* * Single http header representation * * Copyright (c) 1998 Microsoft Corporation */ namespace System.Web { using System.Collections; using System.Text; /* * Response header (either known or unknown) */ internal class HttpResponseHeader { private String _unknownHeader; private int _knownHeaderIndex; private String _value; private static readonly string[] EncodingTable = new string[] { "%00", "%01", "%02", "%03", "%04", "%05", "%06", "%07", "%08", "%09", "%0a", "%0b", "%0c", "%0d", "%0e", "%0f", "%10", "%11", "%12", "%13", "%14", "%15", "%16", "%17", "%18", "%19", "%1a", "%1b", "%1c", "%1d", "%1e", "%1f" }; internal HttpResponseHeader(int knownHeaderIndex, String value) { _unknownHeader = null; _knownHeaderIndex = knownHeaderIndex; // encode header value if if(HttpRuntime.EnableHeaderChecking) { _value = MaybeEncodeHeader(value); } else { _value = value; } } internal HttpResponseHeader(String unknownHeader, String value) { if(HttpRuntime.EnableHeaderChecking) { _unknownHeader = MaybeEncodeHeader(unknownHeader); _knownHeaderIndex = HttpWorkerRequest.GetKnownResponseHeaderIndex(_unknownHeader); _value = MaybeEncodeHeader(value); } else { _unknownHeader = unknownHeader; _knownHeaderIndex = HttpWorkerRequest.GetKnownResponseHeaderIndex(_unknownHeader); _value = value; } } internal virtual String Name { get { if (_unknownHeader != null) return _unknownHeader; else return HttpWorkerRequest.GetKnownResponseHeaderName(_knownHeaderIndex); } } internal String Value { get { return _value;} } internal void Send(HttpWorkerRequest wr) { if (_knownHeaderIndex >= 0) wr.SendKnownResponseHeader(_knownHeaderIndex, _value); else wr.SendUnknownResponseHeader(_unknownHeader, _value); } // Encode the header if it contains a CRLF pair // internal static string MaybeEncodeHeader(string value) { string sanitizedHeader = value; if (NeedsEncoding(value)) { // DevDiv Bugs 146028 // Denial Of Service scenarios involving // control characters are possible. // We are encoding the following characters: // - All CTL characters except HT (horizontal tab) // - DEL character (\x7f) StringBuilder sb = new StringBuilder(); foreach (char c in value) { if (c < 32 && c != 9) { sb.Append(EncodingTable[c]); } else if (c == 127) { sb.Append("%7f"); } else { sb.Append(c); } } sanitizedHeader = sb.ToString(); } return sanitizedHeader; } // Returns true if the string contains a control character (other than horizontal tab) or the DEL character. internal static bool NeedsEncoding(string value) { foreach (char c in value) { if ((c < 32 && c != 9) || (c == 127)) { return true; } } return false; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu

This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- GZipStream.cs
- BitStack.cs
- TreeChangeInfo.cs
- PrintEvent.cs
- CommandDesigner.cs
- LinkUtilities.cs
- StateMachineSubscriptionManager.cs
- MouseWheelEventArgs.cs
- TypeTypeConverter.cs
- XPathScanner.cs
- PingReply.cs
- Oid.cs
- XmlSortKey.cs
- CaseStatementSlot.cs
- CompositeScriptReferenceEventArgs.cs
- MulticastOption.cs
- TypeUtil.cs
- ActivitiesCollection.cs
- XamlParser.cs
- TempFiles.cs
- Viewport3DVisual.cs
- ScrollEventArgs.cs
- tooltip.cs
- TabControl.cs
- SafeRegistryHandle.cs
- WebPartConnectVerb.cs
- SetIndexBinder.cs
- RolePrincipal.cs
- DbConnectionPoolCounters.cs
- Comparer.cs
- XmlCodeExporter.cs
- ListViewVirtualItemsSelectionRangeChangedEvent.cs
- GenericUI.cs
- SemanticAnalyzer.cs
- ConfigXmlCDataSection.cs
- localization.cs
- FilterElement.cs
- MailMessage.cs
- WindowsRegion.cs
- SolidColorBrush.cs
- AttributeProviderAttribute.cs
- DataGridViewRowHeightInfoPushedEventArgs.cs
- RC2CryptoServiceProvider.cs
- CapabilitiesUse.cs
- RowBinding.cs
- ExpressionBuilderCollection.cs
- GiveFeedbackEvent.cs
- Int16AnimationUsingKeyFrames.cs
- SessionStateSection.cs
- SqlRecordBuffer.cs
- ListViewInsertedEventArgs.cs
- BasicCommandTreeVisitor.cs
- GACIdentityPermission.cs
- Point3DCollectionConverter.cs
- SamlEvidence.cs
- DataGridViewCellValidatingEventArgs.cs
- Mutex.cs
- SafeCryptoKeyHandle.cs
- AsyncResult.cs
- MatrixConverter.cs
- EditorZoneBase.cs
- PropertyOrder.cs
- figurelengthconverter.cs
- UnsafeNativeMethods.cs
- TrackingStringDictionary.cs
- NetworkCredential.cs
- QueryReaderSettings.cs
- WorkflowMessageEventHandler.cs
- ConsoleTraceListener.cs
- EventLogPermissionAttribute.cs
- MouseGesture.cs
- AncestorChangedEventArgs.cs
- CodeExporter.cs
- CompiledXpathExpr.cs
- TextParaClient.cs
- AttachedAnnotationChangedEventArgs.cs
- diagnosticsswitches.cs
- FontNamesConverter.cs
- Evaluator.cs
- WebPartExportVerb.cs
- XPathMessageContext.cs
- DataGridViewColumnTypeEditor.cs
- WindowsNonControl.cs
- SamlAuthenticationClaimResource.cs
- XsltInput.cs
- StylusPointProperties.cs
- TableParagraph.cs
- SecUtil.cs
- ActivityPreviewDesigner.cs
- AspNetHostingPermission.cs
- DropTarget.cs
- AddInBase.cs
- RequestChannelBinder.cs
- DbConnectionPool.cs
- WS2007HttpBindingCollectionElement.cs
- MonitorWrapper.cs
- AsyncResult.cs
- XmlQueryRuntime.cs
- ProfileGroupSettingsCollection.cs
- SupportsEventValidationAttribute.cs