# HG changeset patch
# User Sergey Kandaurov <pluknet@nginx.com>
# Date 1628588112 -10800
# Node ID 0d35b1ff6af50db42b81ec81a91eb9785ee90cb2
# Parent  598f8e3bef30f434c454aac4c8a471cb56e08919
HTTP/3: disabled control characters and space in header names.

This is a follow up to 41f4bd4c51f1.

diff --git a/src/http/v3/ngx_http_v3_request.c b/src/http/v3/ngx_http_v3_request.c
--- a/src/http/v3/ngx_http_v3_request.c
+++ b/src/http/v3/ngx_http_v3_request.c
@@ -428,7 +428,7 @@ ngx_http_v3_validate_header(ngx_http_req
             continue;
         }
 
-        if (ch == '\0' || ch == LF || ch == CR || ch == ':'
+        if (ch <= 0x20 || ch == 0x7f || ch == ':'
             || (ch >= 'A' && ch <= 'Z'))
         {
             ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,