tree 38f7e621537609b0dbd2e3f033b08c15eb6807b1
parent 08abf4d948c22eae54ea207977c8ee700412a442
author Nicholas S. Husin <nsh@golang.org> 1786485235 -0400
committer Nicholas Husin <nsh@golang.org> 1786554730 -0700

internal/http3: delete invalid Content-Length if declared in server handler

Following our HTTP/1 and HTTP/2 server implementations, when a
Content-Length header is set to an invalid value in a server handler, it
should be stripped.

Also change responseWriter.bodyLenLeft to be int64, to avoid possible
overflow shenanigan on 32-bit systems.

For golang/go#70914

Change-Id: I76174d81e7b5993b62a32235ba5008f76a6a6964
Reviewed-on: https://go-review.googlesource.com/c/net/+/813560
Reviewed-by: Nicholas Husin <husin@google.com>
LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>