tree 275e8d1e986786473a02c26d160ff1e66342c09e
parent 497ab4f519f429b87cc47c7df7ea8a5ce369d567
author Christopher Faulet <cfaulet@haproxy.com> 1570793662 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1571084930 +0200

MINOR: h1: Reject requests if the authority does not match the header host

As stated in the RCF7230#5.4, a client must send a field-value for the header
host that is identical to the authority if the target URI includes one. So, now,
by default, if the authority, when provided, does not match the value of the
header host, an error is triggered. To mitigate this behavior, it is possible to
set the option "accept-invalid-http-request". In that case, an http error is
captured without interrupting the request parsing.