Commits on Jun 16, 2024

1. [security] Fix crash when the Upgrade header cannot be read …

   It is possible that the Upgrade header is correctly received and handled
   (the `'upgrade'` event is emitted) without its value being returned to
   the user. This can happen if the number of received headers exceed the
   `server.maxHeadersCount` or `request.maxHeadersCount` threshold. In this
   case `incomingMessage.headers.upgrade` may not be set.
   
   Handle the case correctly and abort the handshake.
   
   Fixes #2230

   

   lpinca committed Jun 16, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for dec10b6
   • Browse repository at this point

   Copy the full SHA

   dec10b6 View commit details

   Browse the repository at this point in the history