tree 1a3553edc026e7fe835f44199c51a3fc7d30ad01
parent b5d2b9e154d78e4075db163826c5e0f6d31b2ab1
author Amaury Denoyelle <adenoyelle@haproxy.com> 1628840604 +0200
committer Willy Tarreau <w@1wt.eu> 1629188540 +0200
encoding latin1

REGTESTS: add a test to prevent h2 desync attacks

This test ensure that h2 pseudo headers are properly checked for invalid
characters and the host header is ignored if :authority is present. This
is necessary to prevent h2 desync attacks as described here
https://portswigger.net/research/http2