From 8b68438b2e0b38909b5b2f76e22ceccd2fa48278 Mon Sep 17 00:00:00 2001 From: Stefan Eissing Date: Sat, 22 Oct 2022 11:41:55 +0000 Subject: *) mod_http2: field values (headers and trailers) are stripped of leading/trailing whitespace (space +htab) before being processed or send in a response. This is compatible behaviour to HTTP/1.1 parsers that strip incoming headers of such characters. [Stefan Eissing] - removed intermittent "H2HeaderStrictness" directive again. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1904777 13f79535-47bb-0310-9956-ffa450edef68 --- changes-entries/h2_header_strictness.txt | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) (limited to 'changes-entries') diff --git a/changes-entries/h2_header_strictness.txt b/changes-entries/h2_header_strictness.txt index ab39479351..7cac6147e0 100644 --- a/changes-entries/h2_header_strictness.txt +++ b/changes-entries/h2_header_strictness.txt @@ -1,4 +1,5 @@ - *) mod_http2: new directive "H2HeaderStrictness" to control the compliance - level of header checks as defined in the HTTP/2 RFCs. Default is 7540. - 9113 activates the checks for forbidden leading/trailing whitespace in - field values (available from nghttp2 v1.50.0 on). + *) mod_http2: field values (headers and trailers) are stripped of + leading/trailing whitespace (space +htab) before being processed + or send in a response. This is compatible behaviour to HTTP/1.1 + parsers that strip incoming headers of such characters. + [Stefan Eissing] -- cgit v1.2.1