Required Connect Header Validation

* Make the ':authority' pseudo-header required. * Make the ':scheme' and ':path' pseudo-headers optional.
aiortc · Jul 22, 2021 · a18a6cf · a18a6cf
1 parent 5bcccb7
commit a18a6cf
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/aioquic/h3/connection.py b/src/aioquic/h3/connection.py
@@ -285,7 +285,7 @@ def validate_request_headers(headers: Headers) -> None:
             # we use it for the WebSocket demo.
             (b":method", b":scheme", b":authority", b":path", b":protocol")
         ),
-        required_pseudo_headers=frozenset((b":method", b":scheme", b":path")),
+        required_pseudo_headers=frozenset((b":method", b":authority")),
     )
 
 

diff --git a/tests/test_h3.py b/tests/test_h3.py
@@ -1703,7 +1703,7 @@ def test_validate_request_headers(self):
             validate_request_headers([(b":method", b"GET")])
         self.assertEqual(
             cm.exception.reason_phrase,
-            "Pseudo-headers [b':path', b':scheme'] are missing",
+            "Pseudo-headers [b':authority'] are missing",
         )
 
         # empty :authority pseudo-header for http/https