diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2021-08-10 12:35:12 +0300 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2021-08-10 12:35:12 +0300 |
| commit | 6fb9bdad6a811f00388044a89d322fbdfd072606 (patch) | |
| tree | b24900a081bee1d0598da396673d5b0546d99b74 /src/http/v3/ngx_http_v3_request.c | |
| parent | e1fbbfaba6951ace275d64677c49d160fe5ba3ab (diff) | |
| download | nginx-6fb9bdad6a811f00388044a89d322fbdfd072606.tar.gz nginx-6fb9bdad6a811f00388044a89d322fbdfd072606.zip | |
HTTP/3: disabled control characters and space in header names.
This is a follow up to 41f4bd4c51f1.
Diffstat (limited to 'src/http/v3/ngx_http_v3_request.c')
| -rw-r--r-- | src/http/v3/ngx_http_v3_request.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/http/v3/ngx_http_v3_request.c b/src/http/v3/ngx_http_v3_request.c index f45a7b95e..1fcbad1de 100644 --- a/src/http/v3/ngx_http_v3_request.c +++ b/src/http/v3/ngx_http_v3_request.c @@ -428,7 +428,7 @@ ngx_http_v3_validate_header(ngx_http_request_t *r, ngx_str_t *name, continue; } - if (ch == '\0' || ch == LF || ch == CR || ch == ':' + if (ch <= 0x20 || ch == 0x7f || ch == ':' || (ch >= 'A' && ch <= 'Z')) { ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |