mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-06-20 20:51:09 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

HTTP/3: disabled control characters and space in header names.

Browse Source 
This is a follow up to 41f4bd4c51f1.
This commit is contained in:
Sergey Kandaurov 2021-08-10 12:35:12 +03:00
parent e1fbbfaba6
commit 6fb9bdad6a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/http/v3/ngx_http_v3_request.c
View File

@ -428,7 +428,7 @@ ngx_http_v3_validate_header(ngx_http_request_t *r, ngx_str_t *name,
continue;
}
if (ch == '\0' || ch == LF || ch == CR || ch == ':'
if (ch <= 0x20 || ch == 0x7f || ch == ':'
|| (ch >= 'A' && ch <= 'Z'))
{
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,