Skip to content

Fix Sec-WebSocket-Key handling during H2 => H1 WebSocket downgrades#2806

Merged
MihaZupan merged 2 commits intodotnet:mainfrom
MihaZupan:h2ws-h1-clientKey
Apr 2, 2025
Merged

Fix Sec-WebSocket-Key handling during H2 => H1 WebSocket downgrades#2806
MihaZupan merged 2 commits intodotnet:mainfrom
MihaZupan:h2ws-h1-clientKey

Conversation

@MihaZupan
Copy link
Member

Closes #2805 (issue has more info)

@MihaZupan MihaZupan added this to the YARP 3.0 milestone Mar 24, 2025
@MihaZupan MihaZupan merged commit 96322f1 into dotnet:main Apr 2, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

H2 => H1 WebSocket downgrade logic doesn't handle invalid requests with the Sec-WebSocket-Key header set

2 participants