Mercurial > hg > nginx-quic
annotate auto/have_headers @ 8567:7a6afd584eb4
Disabled HTTP/1.0 requests with Transfer-Encoding.
The latest HTTP/1.1 draft describes Transfer-Encoding in HTTP/1.0 as having
potentially faulty message framing as that could have been forwarded without
handling of the chunked encoding, and forbids processing subsequest requests
over that connection: https://github.com/httpwg/http-core/issues/879.
While handling of such requests is permitted, the most secure approach seems
to reject them.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Mon, 09 Aug 2021 18:12:12 +0300 |
parents | d620f497c50f |
children |