Mercurial > hg > nginx

comparison src/http/v3/ngx_http_v3_request.c @ 8832:0d35b1ff6af5 quic

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
HTTP/3: disabled control characters and space in header names. This is a follow up to 41f4bd4c51f1.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 10 Aug 2021 12:35:12 +0300
parents c35b255d80dc
children d8d48c977b0f
comparison
equal deleted inserted replaced
8831:598f8e3bef30 8832:0d35b1ff6af5
426 || (ch == '_' && cscf->underscores_in_headers)) 426 || (ch == '_' && cscf->underscores_in_headers))
427 { 427 {
428 continue; 428 continue;
429 } 429 }
430 430
431 if (ch == '\0' || ch == LF || ch == CR || ch == ':' 431 if (ch <= 0x20 || ch == 0x7f || ch == ':'
432 || (ch >= 'A' && ch <= 'Z')) 432 || (ch >= 'A' && ch <= 'Z'))
433 { 433 {
434 ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, 434 ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
435 "client sent invalid header name: \"%V\"", name); 435 "client sent invalid header name: \"%V\"", name);
436 436