RFR: 8354276: Strict HTTP header validation [v2]
Daniel Jeliński
djelinski at openjdk.org
Thu Apr 10 13:31:40 UTC 2025
On Thu, 10 Apr 2025 12:59:25 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:
>> src/java.net.http/share/classes/jdk/internal/net/http/common/ValidatingHeadersConsumer.java line 46:
>>
>>> 44: REQUEST,
>>> 45: RESPONSE,
>>> 46: TRAILER
>>
>> Do we need `TRAILER`, given we don't use it, AFAIU?
>
> We have no way to relay trailers to the caller code at the moment. But we can't prevent servers to send them.
Removed
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/24569#discussion_r2037400492
More information about the net-dev
mailing list