Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[balsa] Validate trailers even if not enabled. #28958

Closed
wants to merge 1 commit into from
Closed

[balsa] Validate trailers even if not enabled. #28958

wants to merge 1 commit into from

Conversation

bencebeky
Copy link
Contributor

This brings BalsaParser trailer validation (format and characters) in alignment with http-parser behavior. The downside is that this change makes BalsaParser enforce the header size limit (both on individual lines and on total size of trailer block) even when trailers are not enabled, whereas http-parser does not restrict size at all when trailers are not enabled.

Tracking issue: #21245

Signed-off-by: Bence Béky bnc@google.com

Commit Message: [balsa] Validate trailers even if not enabled.
Additional Description:
Risk Level: low, changed code protected by existing default-false runtime flag.
Testing: //test/common/http/http1:codec_impl_test
Release Notes: n/a
Platform Specific Features: n/a
Runtime guard: envoy.reloadable_features.http1_use_balsa_parser

This brings BalsaParser trailer validation (format and characters) in
alignment with http-parser behavior. The downside is that this change
makes BalsaParser enforce the header size limit (both on individual
lines and on total size of trailer block) even when trailers are not
enabled, whereas http-parser does not restrict size at all when trailers
are not enabled.

Signed-off-by: Bence Béky <bnc@google.com>
@repokitteh-read-only
Copy link

As a reminder, PRs marked as draft will not be automatically assigned reviewers,
or be handled by maintainer-oncall triage.

Please mark your PR as ready when you want it to be reviewed!

🐱

Caused by: #28958 was opened by bencebeky.

see: more, trace.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants