arturobernalg opened a new pull request, #847:
URL: https://github.com/apache/httpcomponents-client/pull/847
Fixed permessage-deflate fragmentation and the SYNC_FLUSH drain in both
stacks, derived the client masking key from SecureRandom, and failed the
connection on RSV1 control frames and on a data frame received mid-fragment.
Bounded the HTTP/2 server inbound window and outbound queue, rejected a
64-bit length with the MSB set, enforced the 125-byte control frame limit, and
truncated the CLOSE reason.
Deduplicated extension offers by name, released the Deflater and Inflater
on session end, accepted any 2xx Extended CONNECT response, and guarded the H2
transport against a cancelled selection key on shutdown.
Added tests for each; the module suite passes and checkstyle is clean.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
