v1.0.2
Changed
- Listen sockets set
{send_timeout_close, true}so a send that hits
send_timeoutcloses the socket instead of leaving it half-dead
Fixed
- Reject an incomplete HTTP/1.1 request head as
header_too_largeonce
the buffered input exceedsmax_header_sizeplus an 8 KiB
request-line allowance, bounding both memory and the repeated rescan
of the unparsed tail - Apply the same
max_header_sizebudget to incomplete chunked trailer
sections - Reject chunk-size lines longer than 1 KiB as
invalid_chunk_size
Full Changelog: v1.0.1...v1.0.2