mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
75f3feab6c
A trailer HEADERS frame lands in the same header store as the request, so a rule on http.host could see the authority of a trailer: a request to a denied host that named an allowed one while closing itself was accepted, flow included. RFC 9113 8.1 forbids pseudo-header fields in trailers and RFC 9110 6.5.1 keeps routing fields such as Host out of them, so the value is now taken from the frames before the first DATA frame, or before the HEADERS frame that follows a completed block. The h2c upgrade path sends one HEADERS frame per field with no END_HEADERS, so those frames are all header section and keep counting: cutting at the second HEADERS frame rather than at a completed block breaks that stream, and http2-keywords2 says so. Ticket: #9149. |
1 week ago | |
|---|---|---|
| .. | ||
| .cargo | ||
| derive | 3 weeks ago | |
| ffi | 2 months ago | |
| htp | 4 weeks ago | |
| src | 1 week ago | |
| suricatactl | 7 months ago | |
| suricatasc | 4 months ago | |
| sys | 1 week ago | |
| .gitignore | ||
| Cargo.lock.in | 1 week ago | |
| Cargo.toml.in | 1 month ago | |
| Makefile.am | 3 weeks ago | |
| cbindgen.toml | 4 months ago | |
| rustfmt.toml | ||