66b6787fbe
src: Use "sensitive" to indicate "never indexed" header field
2015-02-24 23:12:12 +09:00
f2a498e3c4
Disallow upper-cased header field name
2015-02-24 18:45:59 +09:00
1a2bccd71c
nghttpx: Share nghttp2_session_callbacks between objects
2015-02-24 15:21:10 +09:00
8417275368
nghttpx: Code cleanup
2015-02-24 15:11:09 +09:00
1646352f3c
Update doc
2015-02-24 14:48:58 +09:00
c98cf045d6
nghttpx: Use omit minor version in case of HTTP/2 in via header and accesslog
2015-02-24 14:43:01 +09:00
814c7e68e0
Ignore regular headers if it includes illegal characters.
...
This commit only affects the library behaviour unless
nghttp2_option_set_no_http_messaging() is used.
We like strict validation against header field name and value against
RFC 7230, but we have already so much web sites and libraries in
public internet which do not obey these rules. Simply just
terminating stream because of this may break web sites and it is too
disruptive. So we decided that we should be conservative here so
those header fields containing illegal characters are just ignored.
But we are conservative only for regular headers. We are strict for
pseudo headers since it is new to HTTP/2 and new implementations
should know the rules better.
2015-02-22 23:13:27 +09:00
c5c58ccd78
Add note for nghttpx UNIX domain socket support
2015-02-22 18:23:09 +09:00
1468bcd7b4
Update man pages
2015-02-22 18:10:55 +09:00
8b533e19bb
nghttpx: Remove option name from unix path sample since it is a bit strange
2015-02-22 18:09:37 +09:00
a55a080b9c
Update man pages
2015-02-22 18:02:57 +09:00
df32a534fc
nghttpx: Rename ConnectionHandler::acceptor4_ as acceptor_
...
This change is motivated by that fact that we use it for UNIX domain
socket as well as IPv4.
2015-02-22 17:59:50 +09:00
e583a25a8b
nghttpx: Fix error found by coverity scan
2015-02-22 17:53:12 +09:00
4430b06c71
Add parentheses around macro parameters
2015-02-22 17:43:14 +09:00
6051ff63e0
tests: Fix compile error with gcc-4.7
2015-02-22 17:43:00 +09:00
da2376effd
nghttpx: Add host_unix field to DownstreamAddr to tell it is UNIX domain sock
2015-02-22 17:25:23 +09:00
0c4ae3dea5
nghttpx: Support UNIX domain socket on frontend
...
This commit also fixes environment variables used to tell inherited
file descriptors to new binary are stacked up each time new binary is
executed.
2015-02-22 17:25:23 +09:00
e457c9a414
src: Add util::strieq_l
2015-02-22 15:32:48 +09:00
997f9233bc
nghttpx: Support UNIX domain socket in backend connections
2015-02-22 12:27:51 +09:00
49781da8f0
nghttpx: Don't need to const_cast to sockaddr*
2015-02-22 12:06:31 +09:00
7f9de007d0
nghttpx: Fix crash in http/1 backend when backend returns more bytes than CL
...
This is typically programming mistake that we did not check return
value before doing another.
2015-02-21 21:17:52 +09:00
c506386997
Add libxml2.m4 for convenience to build nghttp2 from git repo easily
2015-02-21 21:06:19 +09:00
3144f7de72
asio-sv2: Fix compile error with OS X
...
Use struct stat.st_mtime instead of st_mtim which seems to be Linux
specific.
2015-02-21 21:02:40 +09:00
c84a190ac7
nghttpx: Use return 0 instead of break for readability
2015-02-21 17:08:03 +09:00
a26a597453
nghttpx: Cast configuration value to rlim_t to avoid compile error on 32bit
2015-02-21 16:57:02 +09:00
20a689ef44
Update doc
2015-02-21 16:53:41 +09:00
62928ddbcd
python: Remove validation offered by nghttp2 lib
2015-02-21 00:20:30 +09:00
04ef26473a
asio-lib: Increase output buffer size
2015-02-21 00:08:10 +09:00
7897f5b94b
asio-lib: Remove validation offered by nghttp2 lib
2015-02-21 00:06:05 +09:00
9302e3edf4
src: Use util::streq_l to compare against string literal
2015-02-20 23:57:40 +09:00
ab93a700ce
src: Announce h2 ALPN
2015-02-20 23:50:17 +09:00
2fc1dd77d2
Update doc
2015-02-20 23:30:57 +09:00
e45c523dc7
Add nghttp2_option_set_no_http_messaging() API function
...
This API function with nonzero |val| parameter disables HTTP Messaging
validation in nghttp2 library, so that application can use nghttp2
library for non-HTTP use.
2015-02-20 23:26:56 +09:00
b3846d6c27
Rename NGHTTP2_OPTMASK_NO_HTTP_SEMANTICS with NGHTTP2_OPTMASK_NO_HTTP_MESSAGING
2015-02-20 23:07:48 +09:00
dec115cff3
Document HTTP Messaging enforcement performed by nghttp2 library
2015-02-20 23:06:14 +09:00
fe84ec5e8b
tiny-nghttpd: Add token lookup for slight optimization
2015-02-20 21:50:02 +09:00
b39aa43537
Use C-style comment
2015-02-20 21:49:47 +09:00
2216fd2bc1
tiny-nghttpd: Remove validations offered by lib
2015-02-20 20:58:11 +09:00
83d9ee1fd1
Update http-parser
2015-02-20 19:51:41 +09:00
4424cf5b65
nghttpx: Fix 1 second delay in HTTP/2 backend connection
2015-02-20 19:48:35 +09:00
00a83a44b4
nghttp: Simplify checking
2015-02-20 19:35:54 +09:00
83952ef0af
Insert '_' before header name nghttp2_http_flag to consistent with token
2015-02-20 19:30:34 +09:00
3dbd2d31bd
Early return after :method is seen
2015-02-20 19:26:34 +09:00
f755ea3894
nghttpx: Simplify HttpsUpstream::on_read
2015-02-20 19:24:48 +09:00
50c4aa061f
nghttpx: Response with 503 when re-submission to backend failed
2015-02-20 19:23:52 +09:00
6657966334
nghttpx: HttpsUpdatem: Don't send error_page if response state is MSG_COMPLETE
2015-02-20 01:25:18 +09:00
512aa8942a
nghttp: Fix -H does not work with -u upgrade request
2015-02-20 01:16:49 +09:00
b371331297
Merge branch 'enforce-http-semantics'
2015-02-20 01:02:06 +09:00
489b4f307c
nghttp, nghttpd, nghttpx: Remove validations libnghttp2 offers
2015-02-20 01:01:10 +09:00
b157d4ebb2
Validate HTTP semantics by default
...
Previously we did not check HTTP semantics and it is left out for
application. Although checking is relatively easy, but they are
scattered and error prone. We have implemented these checks in our
applications and also feel they are tedious. To make application
development a bit easier, this commit adds basic HTTP semantics
validation to library code. We do following checks:
server:
* HEADERS is either request header or trailer header. Other type of
header is disallowed.
client:
* HEADERS is either zero or more non-final response header or final
response header or trailer header. Other type of header is
disallowed.
For both:
* Check mandatory pseudo header fields.
* Make sure that content-length matches the amount of DATA we
received.
If validation fails, RST_STREAM of type PROTOCOL_ERROR is issued.
2015-02-20 01:01:10 +09:00
Tatsuhiro Tsujikawa