Skip to content

Conversation

a-denoyelle
Copy link

Host header can be used as an alternative to :authority in HTTP/3 request. However, such requests is not handled properly in Http3Conn::build_h3_response() as only authority is considered, which can cause a crash due to unwrapping.

Fix this by using host header value. Note that this is only the case if authority is null or unset. In other cases, authority is preferred, either if host is also set or not.

Host header can be used as an alternative to :authority in HTTP/3
request. However, such requests is not handled properly in
Http3Conn::build_h3_response() as only authority is considered, which
can cause a crash due to unwrapping.

Fix this by using host header value. Note that this is only the case if
authority is null or unset. In other cases, authority is preferred,
either if host is also set or not.
@a-denoyelle a-denoyelle requested a review from a team as a code owner July 10, 2025 09:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant