diff --git a/draft-ietf-httpbis-messaging-latest.xml b/draft-ietf-httpbis-messaging-latest.xml index f4f86360d..021e9f135 100644 --- a/draft-ietf-httpbis-messaging-latest.xml +++ b/draft-ietf-httpbis-messaging-latest.xml @@ -1128,10 +1128,11 @@ https://www.example.org
  • If a message is received without Transfer-Encoding and with - either multiple Content-Length header fields having - differing field values or a single Content-Length header field having an - invalid value, then the message framing is invalid and - the recipient &MUST; treat it as an unrecoverable error. + an invalid Content-Length header field, then the message + framing is invalid and the recipient &MUST; treat it as an unrecoverable + error, unless the field value can be successfully parsed as a + comma-separated list (), all values in the + list are valid, and all values in the list are the same. If this is a request message, the server &MUST; respond with a 400 (Bad Request) status code and then close the connection. If this is a response message received by a proxy, @@ -3494,6 +3495,7 @@ Upgrade: websocket
      +
    • In , adjust requirements for handling multiple content-length values ()
    diff --git a/draft-ietf-httpbis-semantics-latest.xml b/draft-ietf-httpbis-semantics-latest.xml index 989fcd2e5..bbbfb4c3d 100644 --- a/draft-ietf-httpbis-semantics-latest.xml +++ b/draft-ietf-httpbis-semantics-latest.xml @@ -3613,15 +3613,15 @@ bytes=500-700,601-999 ().
    - If a message is received that has multiple Content-Length header fields - with field values consisting of the same decimal value, or a single - Content-Length header field with a field value containing a list of - identical decimal values (e.g., "Content-Length: 42, 42"), indicating that - duplicate Content-Length header fields have been generated or combined by an - upstream message processor, then the recipient &MUST; either reject the - message as invalid or replace the duplicated field values with a single - valid Content-Length field containing that decimal value prior to - determining the message body length or forwarding the message. + If a message is received that has a Content-Length header field value + consisting of the same decimal value as a comma-separated list () -- for example, "Content-Length: 42, 42" -- + indicating that duplicate Content-Length header fields have been generated + or combined by an upstream message processor, then the recipient &MUST; + either reject the message as invalid or replace the duplicated field + values with a single valid Content-Length field containing that decimal + value prior to determining the message body length or forwarding the + message. @@ -12337,6 +12337,7 @@ Content-Encoding: gzip