lanka","sudan","suriname","svalbard and jan mayen","swaziland","sweden","switzerland","syria","taiwan","tajikistan","tanzania","thailand","timor-leste","togo","tokelau","tonga","trinidad and tobago","tunisia","turkey","turkmenistan","turks and caicos islands","tuvalu","uganda","ukraine","united arab emirates","united kingdom","united states minor outlying islands","united states","uruguay","uzbekistan","vanuatu","venezuela","vatican city","vietnam","virgin islands (british)","virgin islands (us)","wallis and futuna","western...

      Headers
        .Builder()
        .add("foo: bar")
        .add(" foo: baz") // Name leading whitespace is trimmed.
        .add("foo : bak") // Name trailing whitespace is trimmed.
        .add("\tkey\t:\tvalue\t") // '\t' also counts as whitespace
        .add("ping:  pong  ") // Value whitespace is trimmed.
        .add("kit:kat") // Space after colon is not required.
        .build()

      builder.addHeader("", "Value")
    }
  }

  @Test
  fun headerAllowsTabOnlyInValues() {
    val builder = Request.Builder()
    builder.header("key", "sample\tvalue")
    assertFailsWith<IllegalArgumentException> {
      builder.header("sample\tkey", "value")
    }
  }

  @Test
  fun headerForbidsControlCharacters() {
    assertForbiddenHeader("\u0000")

        assertEquals("\"  another  \"", result[1]);

        // Tab characters - quoted value keeps quotes
        value = "tab\tvalue,\"quoted\ttab\"";
        result = KuromojiCSVUtil.parse(value);
        assertEquals(2, result.length);
        assertEquals("tab\tvalue", result[0]);
        assertEquals("\"quoted\ttab\"", result[1]);
    }

    public void test_parse_invalid_quotes() {
        String value;

      builder.addHeader("", "Value")
    }
  }

  @Test
  fun headerAllowsTabOnlyInValues() {
    val builder = Request.Builder()
    builder.header("key", "sample\tvalue")
    assertFailsWith<IllegalArgumentException> {
      builder.header("sample\tkey", "value")
    }
  }

  @Test
  fun headerForbidsControlCharacters() {
    assertForbiddenHeader("\u0000")

@argument {String} measurement - `height` or `width`\n * @argument {Object} popperOffsets\n * @argument {Object} referenceOffsets\n * @returns {Number|String}\n * Value in pixels, or original string if no values were extracted\n */\nexport function toValue(str, measurement, popperOffsets, referenceOffsets) {\n  // separate value from unit\n  const split = str.match(/((?:\\-|\\+)?\\d*\\.?\\d*)(.*)/);\n  const value = +split[1];\n  const unit = split[2];\n\n  // If it's not a number it's an operator,...

tt
tt.im
tube
tucker.replit.dev
tui
tula.su
tuleap-partners.com
tunes
tunk.org
tur.ar
tur.br
turek.pl
turin.it
turystyka.pl
tuscany.it
tushu
tuva.su
tuxfamily.org
tuyenquang.vn
tv
tv.bb
tv.bo
tv.br
tv.im
tv.in
tv.it
tv.jo
tv.sd
tv.tr
tv.tz
tvedestrand.no
tvs
tw
tw.cn
twmail.cc

tt
tt.im
tube
tucker.replit.dev
tui
tula.su
tuleap-partners.com
tunes
tunk.org
tur.ar
tur.br
turek.pl
turin.it
turystyka.pl
tuscany.it
tushu
tuva.su
tuxfamily.org
tuyenquang.vn
tv
tv.bb
tv.bo
tv.br
tv.im
tv.in
tv.it
tv.jo
tv.sd
tv.tr
tv.tz
tvedestrand.no
tvs
tw
tw.cn
twmail.cc

navoi.su
north-kazakhstan.su
nov.su
obninsk.su
penza.su
pokrovsk.su
sochi.su
spb.su
tashkent.su
termez.su
togliatti.su
troitsk.su
tselinograd.su
tula.su
tuva.su
vladikavkaz.su
vladimir.su
vologda.su

// Fancy Bits, LLC : http://getchannels.com
// Submitted by Aman Gupta <******@****.***>
channelsdvr.net
u.channelsdvr.net

  - kube-apiserver <= v1.21.?

**Fixed Versions**:
  - kube-apiserver v1.25.4
  - kube-apiserver v1.24.8
  - kube-apiserver v1.23.14
  - kube-apiserver v1.22.16

This vulnerability was reported by Yuval Avrahami of Palo Alto Networks


**CVSS Rating:** Medium (6.6) [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)

## Changes by Kind