7ef244d73b
This test ensure that h2 pseudo headers are properly checked for invalid characters and the host header is ignored if :authority is present. This is necessary to prevent h2 desync attacks as described here https://portswigger.net/research/http2 |
||
---|---|---|
.. | ||
h1_to_h1.vtc | ||
h2_desync_attacks.vtc | ||
h2_to_h1.vtc | ||
http_abortonclose.vtc | ||
http_bodyless_response.vtc | ||
http_msg_full_on_eom.vtc | ||
http_request_buffer.vtc | ||
http_wait_for_body.vtc | ||
protocol_upgrade.vtc | ||
scheme_based_normalize.vtc | ||
websocket.vtc |