diff --git a/websocket-sharp/Net/HttpListenerRequest.cs b/websocket-sharp/Net/HttpListenerRequest.cs index 29bd6e02..3526126d 100644 --- a/websocket-sharp/Net/HttpListenerRequest.cs +++ b/websocket-sharp/Net/HttpListenerRequest.cs @@ -626,6 +626,12 @@ namespace WebSocketSharp.Net internal void AddHeader (string headerField) { + var start = headerField[0]; + if (start == ' ' || start == '\t') { + _context.ErrorMessage = "Invalid header field"; + return; + } + var colon = headerField.IndexOf (':'); if (colon < 1) { _context.ErrorMessage = "Invalid header field";