Package: rss2email
Version: 1:3.8-1~exp1
Severity: minor

rss2email uses the following header:

User-Agent: rss2email/3.8 +https://github.com/wking/rss2email

This is violation of RFC 2616 (HTTP/1.1), which defines the following syntax for the User-Agent field:

  User-Agent      = "User-Agent" ":" 1*( product | comment )
  product         = token ["/" product-version]
  product-version = token
  token           = 1*<any CHAR except CTLs or separators>
  separators      = "(" | ")" | "<" | ">" | "@"
                  | "," | ";" | ":" | "\" | <">
                  | "/" | "[" | "]" | "?" | "="
                  | "{" | "}" | SP | HT

So the ":" and "/" characters are not allowed, except in comments.

--
Jakub Wilk


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to