strict HTTP header field name validation

Do the validation on the original, not the result from unicode case folding.

Background:
latin-1 0xDF is traditionally uppercased 0x53+0x53 which puts it back in ASCII

gunicorn/http/message.py

@@ -98,12 +98,16 @@ class Message(object):
                 raise InvalidHeader(curr)
             name, value = curr.split(":", 1)
             if self.cfg.strip_header_spaces:
-                name = name.rstrip(" \t").upper()
+                name = name.rstrip(" \t")
-            else:
-                name = name.upper()
             if not TOKEN_RE.fullmatch(name):
                 raise InvalidHeaderName(name)
 
+            # this is still a dangerous place to do this
+            #  but it is more correct than doing it before the pattern match:
+            # after we entered Unicode wonderland, 8bits could case-shift into ASCII:
+            # b"\xDF".decode("latin-1").upper().encode("ascii") == b"SS"
+            name = name.upper()
+
             value = [value.lstrip(" \t")]
 
             # Consume value continuation lines

tests/requests/invalid/nonascii_03.http

@@ -0,0 +1,5 @@
+GET /germans.. HTTP/1.1\r\n
+Content-Lengthß: 3\r\n
+Content-Length: 3\r\n
+\r\n
+ÄÄÄ

tests/requests/invalid/nonascii_03.py

@@ -0,0 +1,5 @@
+from gunicorn.config import Config
+from gunicorn.http.errors import InvalidHeaderName
+
+cfg = Config()
+request = InvalidHeaderName