Merge pull request #275 from ngtcp2/authority-at-sign

Do not allow '@' in :authority or host field value
ngtcp2 · Oct 19, 2024 · f5b3fb4 · f5b3fb4
2 parents d10bb5f + a1c3c7f
commit f5b3fb4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/nghttp3_http.c b/lib/nghttp3_http.c
@@ -197,7 +197,7 @@ static char VALID_AUTHORITY_CHARS[] = {
   1 /* 4    */, 1 /* 5    */, 1 /* 6    */, 1 /* 7    */,
   1 /* 8    */, 1 /* 9    */, 1 /* :    */, 1 /* ;    */,
   0 /* <    */, 1 /* =    */, 0 /* >    */, 0 /* ?    */,
-  1 /* @    */, 1 /* A    */, 1 /* B    */, 1 /* C    */,
+  0 /* @    */, 1 /* A    */, 1 /* B    */, 1 /* C    */,
   1 /* D    */, 1 /* E    */, 1 /* F    */, 1 /* G    */,
   1 /* H    */, 1 /* I    */, 1 /* J    */, 1 /* K    */,
   1 /* L    */, 1 /* M    */, 1 /* N    */, 1 /* O    */,