[UNDERTOW-2374] Move the check for allowUnescapedCharactersInUrl to o…

…utside of the path verification loop in Http2ReceiveListener.checkRequestHeaders Signed-off-by: Flavia Rainone <[email protected]>
fl4via · Apr 18, 2024 · 3e8a596 · 3e8a596
1 parent ddb4aee
commit 3e8a596
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/core/src/main/java/io/undertow/server/protocol/http2/Http2ReceiveListener.java b/core/src/main/java/io/undertow/server/protocol/http2/Http2ReceiveListener.java
@@ -322,9 +322,9 @@ private boolean checkRequestHeaders(HeaderMap headers) {
         }
 
         // verify content of request pseudo-headers. Each header should only have a single value.
-        if (headers.contains(PATH)) {
+        if (headers.contains(PATH) && !allowUnescapedCharactersInUrl) {
             for (byte b: headers.get(PATH).getFirst().getBytes(ISO_8859_1)) {
-                if (!allowUnescapedCharactersInUrl && !HttpRequestParser.isTargetCharacterAllowed((char)b)){
+                if (!HttpRequestParser.isTargetCharacterAllowed((char)b)){
                     return false;
                 }
             }