From 61020b36c5ff6b0d1e15e034d7c0c8b0fe9c6f8e Mon Sep 17 00:00:00 2001 From: Matthew Zipkin Date: Fri, 8 May 2026 11:36:33 -0400 Subject: [PATCH] doc: add release note for #35182 replace libevent HTTP server --- doc/release-notes-35182.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 doc/release-notes-35182.md diff --git a/doc/release-notes-35182.md b/doc/release-notes-35182.md new file mode 100644 index 00000000000..f28913acb29 --- /dev/null +++ b/doc/release-notes-35182.md @@ -0,0 +1,16 @@ +HTTP: RPC / REST +---------------- + +The HTTP server has been rewritten from scratch to replace libevent. (#35182) + +`libevent` has been deprecated as a logging category and will be removed in +a future release. At that time configurations like `debugexclude=libevent` will +be invalid. + +Certain HTTP edge cases will observe different behavior to be more RFC-compliant: + +- Stricter enforcement of maximum headers size (8192 bytes) +- Reject requests with whitespace in header field-names +- "Line Folding" is rejected (whitespace at start of a header line) +- Tolerate `%` at the end of requested URLs +- Multiple "Content-Length" headers with different values are rejected