Dirk Wetter 828af39053 Backporting Make sure control chars from HTTP header don't end up in html,csv,json
This is for 3.0. For 3.1dev, see #2332 .

This PR addresses the bug #2330 by implementing a function which removes control characters from the file output format html,csv,json in the output.
In every instance called there's a check before whether the string contains control chars, hoping it'll save a few milli seconds.

A tr function is used, omitting LF.
It doesn't filter the terminal output and the log file output, yet. It provides a function though which is not being called.
2023-03-12 17:40:02 +01:00
..
2020-01-18 21:45:32 +01:00
2020-01-13 23:00:10 +01:00

Naming scheme

  • 00-05: Does the bare testssl.sh work at all?
  • 06-09: Does the reporting work at all?
  • 20-39: Do scans work fine (client side)?
  • 50-69: Are the results what I expect (server side)?

Please help to write Travis/CI tests! Documentation can be found here. You can consult the existing code here. Feel free to use 20_baseline_ipv4_http.t or 23_client_simulation.t as a template.