feat: check pseudo-header

nodejs · Nov 9, 2023 · e5ab3d5 · e5ab3d5
1 parent e1e76b9
commit e5ab3d5
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/lib/fetch/index.js b/lib/fetch/index.js
@@ -2002,7 +2002,8 @@ async function httpNetworkFetch (
                 location = val
               }
 
-              headers.append(key, val)
+              // Note: Not allow pseudo-header for H2. e.g. `:status`
+              if (key.charCodeAt(0) !== 58) headers.append(key, val)
             }
           } else {
             const keys = Object.keys(headersList)
@@ -2016,7 +2017,8 @@ async function httpNetworkFetch (
                 location = val
               }
 
-              headers.append(key, val)
+              // Note: Not allow pseudo-header for H2. e.g. `:status`
+              if (key.charCodeAt(0) !== 58) headers.append(key, val)
             }
           }