c48da13
\r\nhttp2: fix TestServerContinuationFlood flakes762b58d
\r\nhttp2: fix tipos in commentba87210
\r\nhttp2: close connections when receiving too many headersebc8168
\r\nall: fix some typos3678185
\r\nhttp2: make TestCanonicalHeaderCacheGrowth faster448c44f
\r\nhttp2: remove clientTesterc7877ac
\r\nhttp2: convert the remaining clientTester tests to testClientConnd8870b0
\r\nhttp2: use synthetic time in TestIdleConnTimeoutd73acff
\r\nhttp2: only set up deadline when Server.IdleTimeout is positive89f602b
\r\nhttp2: validate client/outgoing trailersSourced from google.golang.org/grpc's\r\nreleases.
\r\n\r\n\r\nRelease 1.56.3
\r\nSecurity
\r\n\r\n
\r\n- \r\n
\r\nserver: prohibit more than MaxConcurrentStreams handlers from running\r\nat once (CVE-2023-44487)
\r\nIn addition to this change, applications should ensure they do not\r\nleave running tasks behind related to the RPC before returning from\r\nmethod handlers, or should enforce appropriate limits on any such\r\nwork.
\r\n