From eac02ee98f9f61d79ae774aa49aa102ddf2076ba Mon Sep 17 00:00:00 2001 From: Matthew Holt Date: Fri, 27 Feb 2026 10:22:39 -0700 Subject: [PATCH] caddyhttp: Limit empty Host check to HTTP/1.1 --- modules/caddyhttp/server.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/caddyhttp/server.go b/modules/caddyhttp/server.go index 70635d959..41a8e55b0 100644 --- a/modules/caddyhttp/server.go +++ b/modules/caddyhttp/server.go @@ -486,7 +486,7 @@ func (s *Server) serveHTTP(w http.ResponseWriter, r *http.Request) error { // code to any HTTP/1.1 request message that lacks a Host header field and to any // request message that contains more than one Host header field line or a Host // header field with an invalid field value." - if r.Host == "" { + if r.ProtoMajor == 1 && r.ProtoMinor == 1 && r.Host == "" { return HandlerError{ Err: errors.New("rfc9112 forbids empty Host"), StatusCode: http.StatusBadRequest,