> The first byte of a SSL ClientHello handshake record is 0x16 (22).
> If the first byte received on a HTTP/1.1 clear connection is 0x16, the HTTP 
> server could fail fast, return 400 bad request and immediately close the 
> connection.
> 
> This changeset extends the fail fast behaviour for other ineligible bytes, 
> such as any byte corresponding to ASCII characters <= 31.

Daniel Fuchs has updated the pull request incrementally with two additional 
commits since the last revision:

 - Update test/jdk/com/sun/net/httpserver/ClearTextServerSSL.java
   
   Co-authored-by: Andrey Turbanov <[email protected]>
 - Update src/jdk.httpserver/share/classes/sun/net/httpserver/Request.java
   
   Co-authored-by: Andrey Turbanov <[email protected]>

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/28827/files
  - new: https://git.openjdk.org/jdk/pull/28827/files/d7c25539..05704ead

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=28827&range=02
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=28827&range=01-02

  Stats: 2 lines in 2 files changed: 0 ins; 0 del; 2 mod
  Patch: https://git.openjdk.org/jdk/pull/28827.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/28827/head:pull/28827

PR: https://git.openjdk.org/jdk/pull/28827

Reply via email to