Index | Thread | Search

From:
"H. Hartzer" <h@hartzer.sh>
Subject:
httpd(8): RFC9112 3.2.2 absolute-form URI support
To:
<tech@openbsd.org>
Date:
Sat, 24 May 2025 16:54:20 +0000

Download raw body.

Thread
Hi tech@,

It looks like RFC9112 allows for a different type of HTTP request[1].

Normally, a client would send something like this:

GET /index.html HTTP/1.1
Host: localhost

But in RFC9112 section 3.2.2, this is now allowed:

GET http://localhost/index.html HTTP/1.1
Host: localhost

(Host header gets ignored in this case.)

I'm not sure if we want to support this or not, but it appears we don't
support it.

$ printf "GET http://localhost/index.html HTTP/1.1\r\nHost: localhost\r\nConnection: Close\r\n\r\n" | nc localhost 80

HTTP/1.0 400 Bad Request
Date: Sat, 24 May 2025 16:31:08 GMT
Server: OpenBSD httpd
Connection: close
Content-Type: text/html
Content-Length: 498
...

Is this better left alone or added?

Thanks!

-Henrich

1: RFC9112