arturobernalg opened a new pull request, #1113: URL: https://github.com/apache/tomcat/pull/1113
RFC 6455, sections 11.3.1 and 11.3.5 do not allow the Sec-WebSocket-Key and Sec-WebSocket-Version header fields to appear more than once in the opening handshake request, and section 4.2.1 requires the version to be 13. A request with repeated fields, or with a version list such as "8, 13", was accepted. Reject repeated fields with a 400 response and a version other than 13 with a 426 response. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
