如何在代码中设置useUnsafeHeaderParsing

Bar*_*rka 18 c# httpwebrequest httpwebresponse c#-4.0

我收到以下异常:

服务器提交了协议违规.Section = ResponseHeader Detail = CR必须后跟LF

从这个问题:

HttpWebRequestError:服务器提交了协议违规.Section = ResponseHeader Detail = CR必须后跟LF

我知道我需要将useUnsafeHeaderParsing设置为True.

这是我的代码:

HttpWebRequest myReq = (HttpWebRequest)WebRequest.Create(url);
WebResponse myResp = myReq.GetResponse(); //exception is thrown here
Run Code Online (Sandbox Code Playgroud)

useUnsafeHeaderParsing是HttpWebRequestElement类的属性.

如何将其集成到上面的代码中?

Edw*_*ing 34

您需要在web.config,inside <system.net>部分中设置它,如下所示:

<system.net> 
  <settings> 
   <httpWebRequest useUnsafeHeaderParsing="true" /> 
  </settings> 
</system.net> 
Run Code Online (Sandbox Code Playgroud)

如果由于某种原因,您不想从配置中执行此操作,则可以通过以编程方式设置配置设置从代码执行此操作.有关示例,请参阅 此页面.

  • 这段代码如何添加到c#webform应用程序中的"app.config"? (2认同)

afr*_*hke 27

正如Edwin所指出的,您需要在web.config或app.config文件中设置useUnsafeHeaderParsing属性.如果您真的想在运行时动态更改值,那么您将不得不求助于反射,因为值隐藏在实例中System.Net.Configuration.SettingsSectionInternal且不可公开访问.

这是一个代码示例(基于此处的信息),可以解决这个问题:

using System;
using System.Net;
using System.Net.Configuration;
using System.Reflection;

namespace UnsafeHeaderParsingSample
{
    class Program
    {
        static void Main()
        {
            // Enable UseUnsafeHeaderParsing
            if (!ToggleAllowUnsafeHeaderParsing(true))
            {
                // Couldn't set flag. Log the fact, throw an exception or whatever.
            }

            // This request will now allow unsafe header parsing, i.e. GetResponse won't throw an exception.
            var request = (HttpWebRequest) WebRequest.Create("http://localhost:8000");
            var response = request.GetResponse();

            // Disable UseUnsafeHeaderParsing
            if (!ToggleAllowUnsafeHeaderParsing(false))
            {
                // Couldn't change flag. Log the fact, throw an exception or whatever.
            }

            // This request won't allow unsafe header parsing, i.e. GetResponse will throw an exception.
            var strictHeaderRequest = (HttpWebRequest)WebRequest.Create("http://localhost:8000");
            var strictResponse = strictHeaderRequest.GetResponse();
        }

        // Enable/disable useUnsafeHeaderParsing.
        // See http://o2platform.wordpress.com/2010/10/20/dealing-with-the-server-committed-a-protocol-violation-sectionresponsestatusline/
        public static bool ToggleAllowUnsafeHeaderParsing(bool enable)
        {
            //Get the assembly that contains the internal class
            Assembly assembly = Assembly.GetAssembly(typeof(SettingsSection));
            if (assembly != null)
            {
                //Use the assembly in order to get the internal type for the internal class
                Type settingsSectionType = assembly.GetType("System.Net.Configuration.SettingsSectionInternal");
                if (settingsSectionType != null)
                {
                    //Use the internal static property to get an instance of the internal settings class.
                    //If the static instance isn't created already invoking the property will create it for us.
                    object anInstance = settingsSectionType.InvokeMember("Section",
                    BindingFlags.Static | BindingFlags.GetProperty | BindingFlags.NonPublic, null, null, new object[] { });
                    if (anInstance != null)
                    {
                        //Locate the private bool field that tells the framework if unsafe header parsing is allowed
                        FieldInfo aUseUnsafeHeaderParsing = settingsSectionType.GetField("useUnsafeHeaderParsing", BindingFlags.NonPublic | BindingFlags.Instance);
                        if (aUseUnsafeHeaderParsing != null)
                        {
                            aUseUnsafeHeaderParsing.SetValue(anInstance, enable);
                            return true;
                        }

                    }
                }
            }
            return false;
        }
    }
}
Run Code Online (Sandbox Code Playgroud)