Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stricter checks for pseudo-headers :method and :path #1613

Merged
merged 1 commit into from
Sep 4, 2021

Conversation

mkauf
Copy link
Contributor

@mkauf mkauf commented Aug 31, 2021

Check the allowed characters for ":method" (see RFC 7230, section 3.2.6) and
":path". For ":path", the space and tab characters are now forbidden, but
other special characters are still allowed for compatibility reasons.

Update genvchartbl.py so that it generates the same table as in the code.

Fixes #1611

Check the allowed characters for ":method" (see RFC 7230, section 3.2.6) and
":path". For ":path", the space and tab characters are now forbidden, but
other special characters are still allowed for compatibility reasons.

Update genvchartbl.py so that it generates the same table as in the code.

Fixes nghttp2#1611
@tatsuhiro-t tatsuhiro-t merged commit fcc2033 into nghttp2:master Sep 4, 2021
@tatsuhiro-t
Copy link
Member

Thank for PR. Merged now.

@tatsuhiro-t tatsuhiro-t added this to the v1.45.0 milestone Sep 4, 2021
@mkauf mkauf deleted the check_pseudo_header_chars branch September 4, 2021 19:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Implement stricter checks for allowed characters in pseudo-header values
2 participants