| ▲ | 8n4vidtmkvmk 3 hours ago | |
Since when are they case sensitive? https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/... says otherwise. It's possible for a server to treat them as case sensitive, but that seems like a bad idea. | ||
| ▲ | thomascountz 2 hours ago | parent [-] | |
+1 HTTP/2, headers are not unique if they only differ by casing, but they must be encoded as lowercase.
HTTP/1.X, headers are insensitive to casing for reasons of comparison and encoding.
So, if Sec-Fetch-Site is sensitive at all, it would be sec-fetch-site when sending via HTTP/2 and you're responsive for encoding/decoding.[1]: https://datatracker.ietf.org/doc/html/rfc7540#section-8.1.2 [2]: https://datatracker.ietf.org/doc/html/rfc2616#section-4.2 | ||