Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8354276 Strict HTTP header validation
  3. JDK-8356247

Release Note: java.net.http.HttpClient is Enhanced to Reject Responses with Prohibited Headers

XMLWordPrintable

      The `java.net.http.HttpClient` will now reject HTTP/2 responses that contain header fields prohibited by the HTTP/2 specification (RFC 9113). This is an implementation detail that should be transparent to the users of the HttpClient API, but could result in failed requests if connecting to a non-conformant HTTP/2 server.

      The headers that are now rejected in HTTP/2 responses include:
      - connection-specific header fields (`Connection`, `Proxy-Connection`, `Keep-Alive`, `Transfer-Encoding`, and `Upgrade`)
      - request pseudo-header fields (`:method`, `:authority`, `:path`, and `:scheme`)

            djelinski Daniel Jelinski
            djelinski Daniel Jelinski
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: