From 13f49b0013d7a01421925ba7e86624eae8fcf2e7 Mon Sep 17 00:00:00 2001 From: Piotr Sikora Date: Tue, 13 Jun 2017 17:01:08 +0300 Subject: HTTP/2: reject HTTP/2 requests without ":scheme" pseudo-header. Signed-off-by: Piotr Sikora --- src/http/v2/ngx_http_v2.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/http/v2/ngx_http_v2.c b/src/http/v2/ngx_http_v2.c index 8e1b7aed4..772561640 100644 --- a/src/http/v2/ngx_http_v2.c +++ b/src/http/v2/ngx_http_v2.c @@ -3332,6 +3332,7 @@ ngx_http_v2_construct_request_line(ngx_http_request_t *r) static const u_char ending[] = " HTTP/2.0"; if (r->method_name.len == 0 + || r->schema_start == NULL || r->unparsed_uri.len == 0) { ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST); -- cgit