curl / curl / 9970

76%

master: 37%

Pull #3581

travis-ci

http2: verify :athority in push promise requests

RFC 7540 says we should verify that the push is for an "authoritative"
server. We make sure of this by only allowing push with an :athority
header that matches the host that was asked for in the URL.

Fixes #3577
Reported-by: Nicolas Grekas
Bug: https://curl.haxx.se/mail/lib-2019-02/0057.html

10 of 10 new or added lines in 1 file covered. (100.0%)

22096 of 29088 relevant lines covered (75.96%)

745579.75 hits per line