-
Bug
-
Resolution: Done
-
Minor
-
1.4.0.Final
-
None
In current implementation there is not sufficient check for pseudo-headers presense in HTTP2 request from client.
According to the specification https://tools.ietf.org/html/rfc7540#section-8.1.2.3:
All HTTP/2 requests MUST include exactly one valid value for the
":method", ":scheme", and ":path" pseudo-header fields, unless it is
a CONNECT request (Section 8.3). An HTTP request that omits
mandatory pseudo-header fields is malformed (Section 8.1.2.6).