tree c780c95190f6db507cf676420d9c4c83cfe8f108
parent e4c04f933b737ca49114058c12c5ab37d667f87d
author Sergey Kandaurov <pluknet@nginx.com> 1628521932 +0300
committer Sergey Kandaurov <pluknet@nginx.com> 1628521932 +0300

Disabled HTTP/1.0 requests with Transfer-Encoding.

The latest HTTP/1.1 draft describes Transfer-Encoding in HTTP/1.0 as having
potentially faulty message framing as that could have been forwarded without
handling of the chunked encoding, and forbids processing subsequest requests
over that connection: https://github.com/httpwg/http-core/issues/879.

While handling of such requests is permitted, the most secure approach seems
to reject them.