HTTP/3: Do not allow invalid pseudo-header fields

RFC9114 requires invalid pseudo-header fields to be rejected, and this
is consistent with HTTP/2.
This commit is contained in:
Demi Marie Obenour 2025-03-21 19:48:30 -04:00
parent a7ee5bffcc
commit ed84f401cf

View File

@ -635,6 +635,10 @@ ngx_http_v3_process_header(ngx_http_request_t *r, ngx_str_t *name,
return NGX_ERROR;
}
if (name->len && name->data[0] == ':') {
return ngx_http_v3_process_pseudo_header(r, name, value);
}
if (r->invalid_header) {
cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module);
@ -646,10 +650,6 @@ ngx_http_v3_process_header(ngx_http_request_t *r, ngx_str_t *name,
}
}
if (name->len && name->data[0] == ':') {
return ngx_http_v3_process_pseudo_header(r, name, value);
}
if (ngx_http_v3_init_pseudo_headers(r) != NGX_OK) {
return NGX_ERROR;
}