x/net/http2: validate connection headers more #14214
Closed
Comments
CL https://golang.org/cl/21534 mentions this issue. |
c3mb0
pushed a commit
to c3mb0/net
that referenced
this issue
Apr 2, 2018
Fixes golang/go#14214 Change-Id: I474af4735e2135d787e948220a8fcdbba73a2b25 Reviewed-on: https://go-review.googlesource.com/21534 Reviewed-by: Andrew Gerrand <adg@golang.org>
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Per https://httpwg.github.io/specs/rfc7540.html#rfc.section.8.1.2.2 and the problem described in curl/curl#633, we should make Go's http2 client & server as strict as the GFE when it comes to not sending and not accepting connection headers over http2.
The text was updated successfully, but these errors were encountered: