tree ac19633e05260436bcd6c7274c6d2be52cfa3be3
parent c89045814202410a2d67ec20ecf177ec77ceae7f
author Paschalis Tsilias <paschalistsilias@gmail.com> 1591176635 +0300
committer Emmanuel Odeke <emm.odeke@gmail.com> 1599248928 +0000

x/net/http2: reject HTTP/2 Content-Length headers containing a sign

Continuing the work of CL 234817, we enforce the same for HTTP/2
connections; that Content-Length header values with a sign (such as
"+5") are rejected or ignored. In each place, the handling of such
incorrect headers follows the approach already in place.

Fixes golang/go#39017

Change-Id: Ie4854962dd0091795cb861d1cb3a78ce753fd3a8
Reviewed-on: https://go-review.googlesource.com/c/net/+/236098
Run-TryBot: Emmanuel Odeke <emm.odeke@gmail.com>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Emmanuel Odeke <emm.odeke@gmail.com>