Skip to content

Forbid all necessary trailer headers #1527

@voodam

Description

@voodam

Scope

RFC says:

   A sender MUST NOT generate a trailer that contains a field necessary
   for message framing (e.g., Transfer-Encoding and Content-Length),
   routing (e.g., Host), request modifiers (e.g., controls and
   conditionals in Section 5 of [RFC7231]), authentication (e.g., see
   [RFC7235] and [RFC6265]), response control data (e.g., see Section
   7.1 of [RFC7231]), or determining how to process the payload (e.g.,
   Content-Encoding, Content-Type, Content-Range, and Trailer).

Part of the work is done in the process_trailer_hdr in simple way, but it's just a part of all headers, need to block the rest.

Testing

Uncomment all TODO #1527 tests - they should become passed. Also maybe find more headers that need to block (see XXX comment above these tests).

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions