| commit | 7ef244d73b073edf3d493ed826ca1b0233c330e0 | [log] [tgz] |
|---|---|---|
| author | Amaury Denoyelle <adenoyelle@haproxy.com> | Fri Aug 13 09:43:24 2021 +0200 |
| committer | Willy Tarreau <w@1wt.eu> | Tue Aug 17 10:22:20 2021 +0200 |
| tree | 1a3553edc026e7fe835f44199c51a3fc7d30ad01 | |
| parent | b5d2b9e154d78e4075db163826c5e0f6d31b2ab1 [diff] |
REGTESTS: add a test to prevent h2 desync attacks This test ensure that h2 pseudo headers are properly checked for invalid characters and the host header is ignored if :authority is present. This is necessary to prevent h2 desync attacks as described here https://portswigger.net/research/http2