]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f847651) | patch
Reject HTTP CONNECT requests with body
authorRoman Arutyunyan <arut@nginx.com>
Thu, 2 Jul 2026 11:09:35 +0000 (15:09 +0400)
committerRoman Arutyunyan <arutyunyan.roman@gmail.com>
Wed, 15 Jul 2026 14:37:17 +0000 (18:37 +0400)
commitf475868196d2f907768bdfdeec0878ed2702cd0d
treeace428126cf197b43f1782b4e5a818b292b2e8dctree | snapshot
parentf847651efa19d8ce4b1fb51461f9830da4568503commit | diff
Reject HTTP CONNECT requests with body

As per RFC 9110, Section 9.3.6:

A CONNECT request message does not have content.

Also, as per Section 8.6:

A user agent SHOULD NOT send a Content-Length header field when the
request message does not contain content and the method semantics do
not anticipate such data.
src/http/ngx_http_request.c diff | blob | history
nginx upstream