REGTESTS: add a test to prevent h2 desync attacks

Browse Source

This test ensure that h2 pseudo headers are properly checked for invalid
characters and the host header is ignored if :authority is present. This
is necessary to prevent h2 desync attacks as described here
https://portswigger.net/research/http2

...

This commit is contained in:

Amaury Denoyelle 2021-08-13 09:43:24 +02:00 committed by Willy Tarreau

parent b5d2b9e154

commit 7ef244d73b

1 changed files with 167 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Show Stats Download Patch File Download Diff File Expand all files Collapse all files