HTTP/2 and HTTP/3 are inconsistent in handling bad field (header & trailer) values
Open
- Dominant language
- C++
- Stars
- 897
- Forks
- 177
- PR merge metrics
- No merged PRs in 30d
Description
The HTTP/2 code strictly validates field values, but the HTTP/3 code doesn’t do that and accepts almost anything.
Contributor guide
Assessment
This issue has not been assessed yet.