my $location = shift;
my $status = shift || 302;
+ $self->location($location);
$self->status($status);
- $self->location($location); # overwrites status if invalid
}
if ( $location =~ m/[\n\r]/ ) { # check for header injection
- $self->status(400); # bad request
-
- # TODO: warn about this or fail
+ die "blocking header injection";
} else {