The official NGINX Open Source repository.
Go to file
Vladimir Homutov ebb6f7d656 HTTP: connections with wrong ALPN protocols are now rejected.
This is a recommended behavior by RFC 7301 and is useful
for mitigation of protocol confusion attacks [1].

To avoid possible negative effects, list of supported protocols
was extended to include all possible HTTP protocol ALPN IDs
registered by IANA [2], i.e. "http/1.0" and "http/0.9".

[1] https://alpaca-attack.com/
[2] https://www.iana.org/assignments/tls-extensiontype-values/
2021-10-20 09:50:02 +03:00
auto Configure: fixed --test-build-epoll on FreeBSD 13. 2021-04-05 20:14:16 +03:00
conf MIME: added application/wasm type (ticket #1606). 2021-05-08 20:31:03 +03:00
contrib Contrib: vim syntax, update core and 3rd party module directives. 2021-05-30 12:26:00 +03:00
docs nginx-1.21.3-RELEASE 2021-09-07 18:21:02 +03:00
misc Updated OpenSSL used for win32 builds. 2021-08-31 17:54:54 +03:00
src HTTP: connections with wrong ALPN protocols are now rejected. 2021-10-20 09:50:02 +03:00
.hgtags release-1.21.3 tag 2021-09-07 18:21:03 +03:00