[PATCH] HTTP/2: reject HTTP/2 requests with "Connection" header

Piotr Sikora piotrsikora at google.com
Tue Jun 13 12:30:22 UTC 2017


Hey Valentin,

> Since HTTP/2 is a separate protocol and not just GET / HTTP/2.0, so
> the r->stream pointer should be tested instead (like in many other
> places).

Done. I've also sent few more patches rejecting remaining invalid
headers. Feel free to squash them together if you prefer.

Best regards,
Piotr Sikora


More information about the nginx-devel mailing list