[PATCH] HTTP/2: reject HTTP/2 requests without ":scheme" pseudo-header

Piotr Sikora piotrsikora at google.com
Thu Mar 30 01:01:55 UTC 2017


Hey Valentin,

> IMHO it's not a good idea to combine style fixes with behavior changes.
> Behavior changing commits are occasionally reverted.

Fair enough, I'll update both patches shortly.

> That's why it's still TODO (in other words intentionally skipped).
> We discussed it with QA and decided to be more tolerant here.

I disagree. Forgiving implementations that allow broken clients to
seemingly "work", even when said clients are not obeying the
specification, are the reason why we have broken clients in the first
place.

Best regards,
Piotr Sikora


More information about the nginx-devel mailing list