Rule for an HTTP header value (the User-Agent, headers): not blank, no C0
control character other than tab (so no CR/LF header injection), no DEL and
nothing above U+00FF. Node's HTTP layer throws an opaque "Invalid character in
header content" at request time for those. Checked by char code so the source
stays free of control bytes.
Rule for an HTTP header value (the User-Agent,
headers): not blank, no C0 control character other than tab (so no CR/LF header injection), no DEL and nothing above U+00FF. Node's HTTP layer throws an opaque "Invalid character in header content" at request time for those. Checked by char code so the source stays free of control bytes.