← Back to release summary

HTTP/2 push header validation

Category
Network / Connectivity
Type
New or changed feature
Status
Enabled by default (Chrome 68)
Intent stage
None

Summary

Do not serve HTTP/2 pushed streams to requests that do not match with respect to the Vary header or range parameters.

Standards & signals

Docs: https://docs.google.com/document/d/1J1hArmFbTuVQNdNlKzblfWovcLGFx5xwMCUlQK0HKNU

View on chromestatus.com