fix(http2): strip content-length header in response to CONNECT reques…

…ts (#3748) s
hyperium · Aug 29, 2024 · 67a4a49 · 67a4a49
1 parent b990031
commit 67a4a49
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/proto/h2/server.rs b/src/proto/h2/server.rs
@@ -485,6 +485,13 @@ where
                                 me.reply.send_reset(h2::Reason::INTERNAL_ERROR);
                                 return Poll::Ready(Err(crate::Error::new_user_header()));
                             }
+                            if res
+                                .headers_mut()
+                                .remove(::http::header::CONTENT_LENGTH)
+                                .is_some()
+                            {
+                                warn!("successful response to CONNECT request disallows content-length header");
+                            }
                             let send_stream = reply!(me, res, false);
                             connect_parts.pending.fulfill(Upgraded::new(
                                 H2Upgraded {