topic
Verified 2026-09-18HTTP/2 Settings and Frame Controls
HTTP/2 SETTINGS parameters and frame rules negotiate connection behavior over the binary protocol.
Use a compliant HTTP/2 stack to validate SETTINGS bounds, frame sizes, stream state, and connection preface handling. These values are not ordinary HTTP/1.1 headers and must not be copied across protocol boundaries blindly.
httpprotocolhttp2security
Reference (http)
PRI * HTTP/2.0
SM
Use a compliant HTTP/2 stack to validate SETTINGS bounds, frame sizes, stream state, and connection preface handling. These values are not ordinary HTTP/1.1 headers and must not be copied across protocol boundaries blindly.
Common mistakes
- Forwarding connection-specific fields into HTTP/2, accepting frames in an invalid stream state, or trusting peer settings without applying resource limits.
Related