[net] internal/http3: validate pseudo-header counts in server

0 views

Skip to first unread message

Nicholas Husin (Gerrit)

unread,

Apr 29, 2026, 2:14:21 PM (23 hours ago) Apr 29

to goph...@pubsubhelper.golang.org, golang-...@googlegroups.com, Nicholas Husin, Damien Neil, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com

Nicholas Husin submitted the change

Change information

Commit message:

internal/http3: validate pseudo-header counts in server

Following RFC 9114, CONNECT requests must have exactly one value for
:method, :scheme, and :path pseudo-headers. CONNECT requests, on the
other hand, should omit :scheme and :path, with only one :authority
pseudo-header.

For golang/go#70914

Change-Id: I7e240bc6997498b96c4f5cc0ecd3dbbf6a6a6964

Reviewed-on: https://go-review.googlesource.com/c/net/+/771421

LUCI-TryBot-Result: golang...@luci-project-accounts.iam.gserviceaccount.com <golang...@luci-project-accounts.iam.gserviceaccount.com>

Reviewed-by: Damien Neil <dn...@google.com>

Reviewed-by: Nicholas Husin <hu...@google.com>

Files:

M internal/http3/server.go
M internal/http3/server_test.go

Change size: M

Delta: 2 files changed, 126 insertions(+), 0 deletions(-)

Branch: refs/heads/master

Submit Requirements:

Code-Review: +1 by Nicholas Husin, +2 by Damien Neil
TryBots-Pass: LUCI-TryBot-Result+1 by golang...@luci-project-accounts.iam.gserviceaccount.com

Open in Gerrit

Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings.

Gerrit

open

diffy

satisfied_requirement

Reply all

Reply to author

Forward

0 new messages