From cd8f8026bb3bf78889e406e3253aad047e49b2e4 Mon Sep 17 00:00:00 2001
From: Filippo Valsorda
- TODO: https://golang.org/cl/231418: only support "chunked" in inbound Transfer-Encoding headers
+
+ Parsing is now stricter as a hardening measure against request smuggling attacks:
+ non-ASCII white space is no longer trimmed like SP and HTAB, and support for the
+ "
@@ -655,7 +657,9 @@ Do not send CLs removing the interior tags from such phrases.
identity
" Transfer-Encoding
was dropped.
- TODO: https://golang.org/cl/224897: make Switching Protocol requests (e.g. Websockets) cancelable
+ When a Switching Protocol (like WebSocket) request handled by
+ ReverseProxy
+ is canceled, the backend connection is now correctly closed.