Skip to content

Ensure Transfer-Encoding is not allowed on HTTP/1.0 requests#2125

Merged
gavinbunney merged 1 commit intomasterfrom
gavin/h1.0-transfer-enc
Apr 23, 2026
Merged

Ensure Transfer-Encoding is not allowed on HTTP/1.0 requests#2125
gavinbunney merged 1 commit intomasterfrom
gavin/h1.0-transfer-enc

Conversation

@gavinbunney
Copy link
Copy Markdown
Collaborator

@gavinbunney gavinbunney commented Apr 22, 2026

Transfer-Encoding was added in HTTP1.1, as per RFC 9112 section 6.1, so we should treat it as an invalid request on HTTP/1.0 requests.

Base automatically changed from gavin/h1-smuggling to master April 22, 2026 23:40
@gavinbunney gavinbunney force-pushed the gavin/h1.0-transfer-enc branch from 8bcdb4f to 059546e Compare April 22, 2026 23:41
@gavinbunney gavinbunney merged commit e33bfe4 into master Apr 23, 2026
4 checks passed
@gavinbunney gavinbunney deleted the gavin/h1.0-transfer-enc branch April 23, 2026 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants