Disable HTTP/2 in http-common. (#591)

We don't support it as a server and nothing we use it as a client with supports it either, so having it enabled just increased attack surface.
Azure · Mar 5, 2024 · 1a31efe · 1a31efe
1 parent 9f5c079
commit 1a31efe
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 35 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/http-common/Cargo.toml b/http-common/Cargo.toml
@@ -10,7 +10,7 @@ base64 = "0.21"
 futures-util = "0.3"
 headers = { version = "0.3" }
 http = "0.2"
-hyper = { version = "0.14", features = ["client", "http1", "http2", "server", "stream", "tcp"] }
+hyper = { version = "0.14", features = ["client", "http1", "server", "stream", "tcp"] }
 hyper-openssl = { version = "0.9" }
 hyper-proxy = { version = "0.9", features = ["openssl-tls"], default-features = false }
 libc = "0.2"