]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 88765b6) | patch
BUG/MINOR: h1-htx: Be sure that H1 response version starts by "HTTP/"
authorChristopher Faulet <cfaulet@haproxy.com>
Wed, 25 Feb 2026 15:00:39 +0000 (16:00 +0100)
committerChristopher Faulet <cfaulet@haproxy.com>
Thu, 5 Mar 2026 14:34:46 +0000 (15:34 +0100)
commit7a474855b4e676e8f37ee7365606e93cff9b9933
tree4c45038ef4f41f0abb9cb76d2fc5bdae4c4784e9tree | snapshot
parent88765b69e0f6b80b9330f65955d62d884d3e6388commit | diff
BUG/MINOR: h1-htx: Be sure that H1 response version starts by "HTTP/"

When the response is parsed, we test the version to be sure it is
valid. However, the protocol was not tested. Now we take care that the
response version starts by "HTTP/", otherwise an error is returned.

Of course, it is still possible to by-pass this test with
"accept-unsafe-violations-in-http-response" option.

This patch could be backported to all stable versions.
src/h1_htx.c diff | blob | history
haproxy upstream