Your Name a912e305c9 Reject requests like "GET / HTTP/1a1" ...

Numbers must be separated by dot. This makes life
a little bit harder for attackers who would like to inject specially crafted packets after GET / (e.g. in nginx there are sometimes regular expressions like (?P<action>[^.]).html

2016-11-04 21:16:01 +03:00

..

invalid

Reject requests like "GET / HTTP/1a1"

2016-11-04 21:16:01 +03:00

valid

Remove upper limit on max header size config (#1313)

2016-09-17 12:49:05 +03:00