CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/06/03 13:25:06
Modified files:
usr.sbin/httpd : httpd.c httpd.h server_http.c
Log message:
httpd: reject obs-fold with 400 (RFC 9112 5.2)
Replace silent kv_extend normalisation with an unconditional 400.
RFC 9112 5.2 explicitly permits rejection; it is the safer choice
over SP replacement, which hides parser ambiguity downstream.
Reported by Stuart Thomas, OK kirill@
