elixir-mint / mint / ca7e4f4473b413622bf609a9e0cfa2c833e8efe2-PR-522

91%

main: 91%

Build Type

Pull #522

github

Committed by ericmj

Commit Message

Document that pushed origins aren't checked

RFC 9113 8.4 only lets a server push responses for origins it's
authoritative for. Mint doesn't check the pushed :scheme and :authority,
so the server push docs now say to compare them with the connection's
origin before using a pushed response and to cancel the promised request
with cancel_request/2 if they don't match.

The example of promised headers also lists :scheme and :authority, which
promised requests always include.

Pull Request Pull Request #522: Fix HTTP/2 header block bound, push validation and CONNECT 204

Coverage Stats

52 of 54 new or added lines in 1 file covered. (96.3%)

2 existing lines in 2 files now uncovered.

1824 of 2012 relevant lines covered (90.66%)

717.74 hits per line