Skip to content

fix lsquic hash flood, support 100 continue,

Latest
Latest
Compare
Choose a tag to compare
@litespeedtech litespeedtech released this 18 Feb 17:36
· 32 commits to master since this release
v1.8.3
c38acc3
  • [Security] Update lsquic to address hash flood vulnerability
  • [New Feature] Add support for "expect: 100 continue" handling.
  • [Improvement] Log HTTP/3 in access log
  • [Bug Fix] Block requests with “Transfer-Encoding”, then “Content-length” headers.
  • [Bug Fix] Run Ruby/python/nodes application server in detached mode.
  • [Bug Fix] Address SSL client authentication bypass.
  • [Bug Fix] Address corner case in HTTP authentication required user list.
Assets 4
Loading