tree 432fbcb511cea5b4f1583e365883af738f8c92d4
parent 2c6ab65301ba64872251b9bf9ea4ceec52a6aa2a
author Maxim Dounin <mdounin@mdounin.ru> 1624892464 +0300
committer Maxim Dounin <mdounin@mdounin.ru> 1624892464 +0300

Added CONNECT method rejection.

No valid CONNECT requests are expected to appear within nginx, since it
is not a forward proxy.  Further, request line parsing will reject
proper CONNECT requests anyway, since we don't allow authority-form of
request-target.  On the other hand, RFC 7230 specifies separate message
length rules for CONNECT which we don't support, so make sure to always
reject CONNECTs to avoid potential abuse.