x/net/http2: validate connection headers more #14214

Closed

Closed

x/net/http2: validate connection headers more#14214

Labels

Milestone

Per https://httpwg.github.io/specs/rfc7540.html#rfc.section.8.1.2.2 and the problem described in curl/curl#633, we should make Go's http2 client & server as strict as the GFE when it comes to not sending and not accepting connection headers over http2.

self-assigned this

added this to the Go1.7 milestone

mentioned this

x/net/http2: should interpret Connection: close request header as Request.Close = true #14227

mentioned this

x/net/http2: make Server reject conn-specific request headers #15087

Contributor

CL https://golang.org/cl/21534 mentions this issue.

closed this as completedin af4fee9

locked and limited conversation to collaborators

added

added a commit that references this issue

http2: make Server reject connection-level headers with a 400 response

unassigned

on Jun 23, 2022

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

Type

No type

Projects

No projects

Milestone

Go1.7
Closed Aug 16, 2016, 100% complete

Relationships

None yet

Development

No branches or pull requests

Participants