BUG/MINOR: h3: reject request URI with invalid characters
authorAmaury Denoyelle <adenoyelle@haproxy.com>
Wed, 16 Apr 2025 13:27:03 +0000 (15:27 +0200)
committerAurelien DARRAGON <adarragon@haproxy.com>
Thu, 17 Apr 2025 13:05:26 +0000 (15:05 +0200)
commit6f907a2e1c990795d099001dc1ee3cf2e93cd6f4
tree0c27555404c61ba525c11f4e2763ca6d102df1ac
parent80798c75bc6dede791f9b774443fcb71cee5d9cb
BUG/MINOR: h3: reject request URI with invalid characters

Ensure that the HTX start-line generated after parsing an HTTP/3 request
does not contain any invalid character, i.e. control or whitespace
characters.

Note that for now path is used directly as URI. Thus, the check is
performed directly over it. A patch will change this to generate an
absolute-form URI in most cases, but it won't be backported to avoid
configuration breaking in stable versions.

This must be backported up to 2.6.

(cherry picked from commit 1faa1285aacaaacd2c2e062d87f04aa481843862)
Signed-off-by: Aurelien DARRAGON <adarragon@haproxy.com>
(cherry picked from commit 3c1914822d9b98f244c3e603c050a19cc29eed36)
Signed-off-by: Aurelien DARRAGON <adarragon@haproxy.com>
src/h3.c