tree 6bb178fde8a8283515395de5e6b79f9af563538a
parent ca7218aaf073627b665459bd881b2b35a481602a
author Christopher Faulet <cfaulet@haproxy.com> 1657025417 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1657179358 +0200

BUG/MEDIUM: h1: Improve authority validation for CONNCET request

From time to time, users complain to get 400-Bad-request responses for
totally valid CONNECT requests. After analysis, it is due to the H1 parser
performs an exact match between the authority and the host header value. For
non-CONNECT requests, it is valid. But for CONNECT requests the authority
must contain a port while it is often omitted from the host header value
(for default ports).

So, to be sure to not reject valid CONNECT requests, a basic authority
validation is now performed during the message parsing. In addition, the
host header value is normalized. It means the default port is removed if
possible.

This patch should solve the issue #1761. It must be backported to 2.6 and
probably as far as 2.4.