Index | Thread | Search

From:
"Kirill A. Korinsky" <kirill@korins.ky>
Subject:
Re: httpd(8): RFC9112 3.2.2 absolute-form URI support
To:
"H. Hartzer" <h@hartzer.sh>
Cc:
tech@openbsd.org
Date:
Sat, 24 May 2025 19:17:12 +0200

Download raw body.

Thread
It is used only for CONNECT, isn’t it?

-- 
wbr, Kirill

> Am 24.05.2025 um 18:56 schrieb H. Hartzer <h@hartzer.sh>:
> 
> Hi tech@,
> 
> It looks like RFC9112 allows for a different type of HTTP request[1].
> 
> Normally, a client would send something like this:
> 
> GET /index.html HTTP/1.1
> Host: localhost
> 
> But in RFC9112 section 3.2.2, this is now allowed:
> 
> GET http://localhost/index.html HTTP/1.1
> Host: localhost
> 
> (Host header gets ignored in this case.)
> 
> I'm not sure if we want to support this or not, but it appears we don't
> support it.
> 
> $ printf "GET http://localhost/index.html HTTP/1.1\r\nHost: localhost\r\nConnection: Close\r\n\r\n" | nc localhost 80
> 
> HTTP/1.0 400 Bad Request
> Date: Sat, 24 May 2025 16:31:08 GMT
> Server: OpenBSD httpd
> Connection: close
> Content-Type: text/html
> Content-Length: 498
> ...
> 
> Is this better left alone or added?
> 
> Thanks!
> 
> -Henrich
> 
> 1: RFC9112
>