]> git.kaiwu.me - nginx.git/commit
HTTP/2: reject requests with out-of-order pseudo-headers
authorSergey Kandaurov <pluknet@nginx.com>
Wed, 15 Jul 2026 11:08:30 +0000 (15:08 +0400)
committerSergey Kandaurov <s.kandaurov@f5.com>
Wed, 15 Jul 2026 12:58:20 +0000 (16:58 +0400)
commita277069b1473936add8b9fc8660bf9a466ff96af
tree3f53e77676472da77f03fd111552e5535bbb62ab
parenta28f950fe495fb8bd41fc4c9ff8f6e2e739b7389
HTTP/2: reject requests with out-of-order pseudo-headers

Handling of pseudo-headers is refactored to be more in line with
HTTP/3 implementation, that is, a request line is now constructed
as soon as pseudo-headers are followed by regular fields.  Here
this plugs a missing handling for absent mandatory or out-of-order
pseudo-headers.

Such requests are now rejected immediately as malformed.

Closes: https://github.com/nginx/nginx/issues/1526
src/http/v2/ngx_http_v2.c