Hey Valentin,
> Since HTTP/2 is a separate protocol and not just GET / HTTP/2.0, so
> the r->stream pointer should be tested instead (like in many other
> places).
Done. I've also sent few more patches rejecting remaining invalid
headers. Feel free to squash them together if you prefer.
Best
On Sunday 26 March 2017 01:41:18 Piotr Sikora via nginx-devel wrote:
> # HG changeset patch
> # User Piotr Sikora
> # Date 1490516709 25200
> # Sun Mar 26 01:25:09 2017 -0700
> # Node ID b8daccea5fde213d4b7a10fa9f57070ab3b6a1ec
> # Parent
Hey,
> # HG changeset patch
> # User Piotr Sikora
> # Date 1490516709 25200
> # Sun Mar 26 01:25:09 2017 -0700
> # Node ID b8daccea5fde213d4b7a10fa9f57070ab3b6a1ec
> # Parent 22be63bf21edaa1b8ea916c7d8cd4e5fe4892061
> HTTP/2: reject HTTP/2 requests with "Connection"
# HG changeset patch
# User Piotr Sikora
# Date 1490516709 25200
# Sun Mar 26 01:25:09 2017 -0700
# Node ID b8daccea5fde213d4b7a10fa9f57070ab3b6a1ec
# Parent 22be63bf21edaa1b8ea916c7d8cd4e5fe4892061
HTTP/2: reject HTTP/2 requests with "Connection" header.
While