search

narfindustries / http-garden

Differential fuzzing REPL for HTTP implementations.
GNU General Public License v3.0
716 stars 64 forks source link

HTTP/2 #13

Open kenballus opened 9 months ago

kenballus commented 9 months ago

HTTP/2 support in the Garden is limited. I had a half-baked version of this at one point, but I removed it because it was distracting from HTTP/1, and I was using an external library for HPACK.

It would be nice to add proper H2 support.

kenballus commented 9 months ago

This comment contains an example of the kind of attack we could find by adding H2 support: https://github.com/httpwg/http-extensions/issues/2738#issuecomment-1954011069