Wondering what a server’s reaction to non-ASCII characters in HTTP headers (names and values) should be. Reject with a 400 or pass through?
Jan 2, 2015 · 4:56 PM UTC
4
1
1
@poutsma Are they? tools.ietf.org/html/rfc7230#… seems to indicate they’re supposed to be US-ASCII, only
1
@stilkov I'd say pass through. It's generally utf-8 encoded nowadays if I understand correctly.
@stilkov I think the spec says that no particular encoding is to be assumed. Non-7-bit ASCII chars are to be treated as “opaque” octets.