Undefined pseudo-header fields are no longer accepted in HTTP/2

Published: | Categories: Networking


Firefox 41 and the earlier versions were incorrectly accepting undefined or invalid pseudo-header fields in HTTP/2 responses. The :version field was being used on Twitter but later removed. Firefox 42 no longer accepts pseudo-header fields except :status, which is required as per the specification, and response headers with arbitrary fields are considered malformed.