Skip to content

Commit cf9d357

Browse files
committed
[optimistic-upgrade] Remove http-message annotation
The "http-message" format doesn't permit comments
1 parent 9cc013b commit cf9d357

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

draft-ietf-httpbis-optimistic-upgrade.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -116,7 +116,7 @@ If the server accepts a protocol transition request, it interprets the subsequen
116116

117117
As a trivial example, consider an HTTP CONNECT client providing connectivity to an untrusted application. If the client is authenticated to the proxy server using a connection-level authentication method such as TLS Client Certificates ({{?TLS=RFC8446, Section 4.4.2}}), the attacker could send an HTTP/1.1 POST request ({{HTTP, Section 9.3.3}}) for the proxy server at the beginning of its TCP connection. If the client delivers this data optimistically, and the CONNECT request fails, the server would misinterpret the application's data as a subsequent authenticated request issued by the client.
118118

119-
~~~ http-message
119+
~~~
120120
## REQUESTS ##
121121

122122
# The malicious application requests a TCP connection to a nonexistent

0 commit comments

Comments
 (0)