Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ignore authority header check when it contains | char #73

Closed
wants to merge 2 commits into from

Conversation

rahulanand16nov
Copy link
Contributor

@rahulanand16nov rahulanand16nov commented May 31, 2022

This PR fixes #53 by forking https://github.com/hyperium/h2 and allowing requests with authority header containing pipe | characters.

The fix is present at: rahulanand16nov/h2@d956cec

It's not a security risk since the authority header is used nowhere in the logic of limitador (correct me if I am wrong). A similar issue will be created in the dependencies repo to fix it.

An image that contains this fix and works: quay.io/rahanand/limitador:test

@rahulanand16nov
Copy link
Contributor Author

I have created an issue in the upstream so we can remove our fork in the future when it's fixed. hyperium/h2#619

@alexsnaps
Copy link
Member

As per our discussion of yesterday, do agree we can close this?

@rahulanand16nov
Copy link
Contributor Author

Yup, can close now but the issue should remain open.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Request with | (pipe) character in authority header is auto-rejected by Limitador
2 participants