add valid

minio · Feb 13, 2025 · b86dbf8 · b86dbf8
1 parent 4350d40
commit b86dbf8
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/cmd/globals.go b/cmd/globals.go
@@ -37,6 +37,7 @@ import (
 	"github.com/minio/madmin-go/v3"
 	"github.com/minio/pkg/v3/console"
 	"github.com/muesli/termenv"
+	"golang.org/x/net/http/httpguts"
 )
 
 const (
@@ -212,6 +213,9 @@ func setGlobalsFromContext(ctx *cli.Context) error {
 			if i <= 0 {
 				return fmt.Errorf("invalid custom header entry %s", header)
 			}
+			if !httpguts.ValidHeaderFieldName(header[:i]) || !httpguts.ValidHeaderFieldValue(header[i+1:]) {
+				return fmt.Errorf("invalid custom header entry %s", header)
+			}
 			globalCustomHeader.Add(header[:i], header[i+1:])
 		}
 	}