You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It's safe. We currently just reject completely. Make sure you include tests, and double check if there's any considerations with regard to a percent encoded : or port.
According to RFC 7230, section 5.4, the
host
header should accept:and
uri-host
is defined to be:which in RFC3986, section 3.2.2 is defined to be:
and as a result
cow_http_hd:reg_name/2
should accept url encoded values.A patched hackney trace shows this being rejected by the current code in cowboy master:
The text was updated successfully, but these errors were encountered: