diff options
| author | Roman Arutyunyan <arut@nginx.com> | 2025-06-26 20:19:59 +0400 |
|---|---|---|
| committer | Sergey Kandaurov <s.kandaurov@f5.com> | 2025-12-23 22:40:33 +0400 |
| commit | bbf65b6e87dfc7f3a42651a55406e214a783808c (patch) | |
| tree | 03a81bb2bddc1967094677f3f87650041654a702 /src/misc/ngx_cpp_test_module.cpp | |
| parent | a5cfa096d26933b1789d86df8af9c12574c23cc5 (diff) | |
| download | nginx-bbf65b6e87dfc7f3a42651a55406e214a783808c.tar.gz nginx-bbf65b6e87dfc7f3a42651a55406e214a783808c.tar.bz2 | |
HTTP/3: fixed handling of :authority and Host with port.
RFC 9114, Section 4.3.1. specifies a restriction for :authority and Host
coexistence in an HTTP/3 request:
: If both fields are present, they MUST contain the same value.
Previously, this restriction was correctly enforced only for portless
values. When Host contained a port, the request failed as if :authority
and Host were different, regardless of :authority presence.
This happens because the value of r->headers_in.server used for :authority
has port stripped. The fix is to use r->host_start / r->host_end instead.
Diffstat (limited to 'src/misc/ngx_cpp_test_module.cpp')
0 files changed, 0 insertions, 0 deletions