diff options
| author | Stefan Eissing <icing@apache.org> | 2022-10-22 11:41:55 +0000 |
|---|---|---|
| committer | Stefan Eissing <icing@apache.org> | 2022-10-22 11:41:55 +0000 |
| commit | 8b68438b2e0b38909b5b2f76e22ceccd2fa48278 (patch) | |
| tree | 860b86bba90ea742c402269304529678d644644e /changes-entries | |
| parent | d7ec293abc89a0dde9cc730acfa7ba838601a197 (diff) | |
| download | httpd-8b68438b2e0b38909b5b2f76e22ceccd2fa48278.tar.gz | |
*) mod_http2: field values (headers and trailers) are stripped of
leading/trailing whitespace (space +htab) before being processed
or send in a response. This is compatible behaviour to HTTP/1.1
parsers that strip incoming headers of such characters.
[Stefan Eissing]
- removed intermittent "H2HeaderStrictness" directive again.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1904777 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'changes-entries')
| -rw-r--r-- | changes-entries/h2_header_strictness.txt | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/changes-entries/h2_header_strictness.txt b/changes-entries/h2_header_strictness.txt index ab39479351..7cac6147e0 100644 --- a/changes-entries/h2_header_strictness.txt +++ b/changes-entries/h2_header_strictness.txt @@ -1,4 +1,5 @@ - *) mod_http2: new directive "H2HeaderStrictness" to control the compliance - level of header checks as defined in the HTTP/2 RFCs. Default is 7540. - 9113 activates the checks for forbidden leading/trailing whitespace in - field values (available from nghttp2 v1.50.0 on). + *) mod_http2: field values (headers and trailers) are stripped of + leading/trailing whitespace (space +htab) before being processed + or send in a response. This is compatible behaviour to HTTP/1.1 + parsers that strip incoming headers of such characters. + [Stefan Eissing] |