Classify header parse errors as bad requests.

Author: samuel-williams-shopify

lib/protocol/http/header/accept.rb

@@ -23,7 +23,9 @@ class Accept < Split
 					(?=,|\z)                  # Match until a comma or end of string
 				/x
 
-				ParseError = Class.new(Error)
+				ParseError = Class.new(Error) do
+					include BadRequest
+				end
 
 				MEDIA_RANGE = /\A(?<type>#{TOKEN})\/(?<subtype>#{TOKEN})(?<parameters>.*)\z/
 

lib/protocol/http/header/accept_charset.rb

@@ -12,7 +12,9 @@ module HTTP
 		module Header
 			# The `accept-charset` header represents a list of character sets that the client can accept.
 			class AcceptCharset < Split
-				ParseError = Class.new(Error)
+				ParseError = Class.new(Error) do
+					include BadRequest
+				end
 
 				# https://tools.ietf.org/html/rfc7231#section-5.3.3
 				CHARSET = /\A(?<name>#{TOKEN})(;q=(?<q>#{QVALUE}))?\z/

lib/protocol/http/header/accept_encoding.rb

@@ -12,7 +12,9 @@ module HTTP
 		module Header
 			# The `accept-encoding` header represents a list of encodings that the client can accept.
 			class AcceptEncoding < Split
-				ParseError = Class.new(Error)
+				ParseError = Class.new(Error) do
+					include BadRequest
+				end
 
 				# https://tools.ietf.org/html/rfc7231#section-5.3.1
 				QVALUE = /0(\.[0-9]{0,3})?|1(\.[0]{0,3})?/

lib/protocol/http/header/accept_language.rb

@@ -12,7 +12,9 @@ module HTTP
 		module Header
 			# The `accept-language` header represents a list of languages that the client can accept.
 			class AcceptLanguage < Split
-				ParseError = Class.new(Error)
+				ParseError = Class.new(Error) do
+					include BadRequest
+				end
 
 				# https://tools.ietf.org/html/rfc3066#section-2.1
 				NAME = /\*|[A-Z]{1,8}(-[A-Z0-9]{1,8})*/i

lib/protocol/http/header/digest.rb

@@ -23,7 +23,9 @@ module Header
 			# # => "sha-256=X48E9qOokqqrvdts8nOJRJN3OWDUoyWxBf7kbu9DBPE=, md5=9bb58f26192e4ba00f01e2e7b136bbd8"
 			# ```
 			class Digest < Split
-				ParseError = Class.new(Error)
+				ParseError = Class.new(Error) do
+					include BadRequest
+				end
 
 				# https://tools.ietf.org/html/rfc3230#section-4.3.2
 				ENTRY = /\A(?<algorithm>[a-zA-Z0-9][a-zA-Z0-9\-]*)\s*=\s*(?<value>.*)\z/

lib/protocol/http/header/range.rb

@@ -10,7 +10,9 @@ module HTTP
 		module Header
 			# Represents a `range` request header.
 			class Range
-				ParseError = Class.new(Error)
+				ParseError = Class.new(Error) do
+					include BadRequest
+				end
 
 				TOKEN = /[!#$%&'*+\-.0-9A-Z^_`a-z|~]+/
 				HEADER = /\A(?<unit>#{TOKEN})=(?<ranges>.*)\z/

lib/protocol/http/header/server_timing.rb

@@ -23,7 +23,9 @@ module Header
 			# # => "db;dur=53.2, cache;dur=12.1;desc=\"Redis lookup\""
 			# ```
 			class ServerTiming < Split
-				ParseError = Class.new(Error)
+				ParseError = Class.new(Error) do
+					include BadRequest
+				end
 
 				# https://www.w3.org/TR/server-timing/
 				METRIC = /\A(?<name>[a-zA-Z0-9][a-zA-Z0-9_\-]*)(;(?<parameters>.*))?\z/

lib/protocol/http/header/te.rb

@@ -14,7 +14,9 @@ module Header
 			#
 			# The `te` header allows a client to indicate which transfer encodings it can handle, and in what order of preference using quality factors.
 			class TE < Split
-				ParseError = Class.new(Error)
+				ParseError = Class.new(Error) do
+					include BadRequest
+				end
 
 				# Transfer encoding token pattern
 				TOKEN = /[!#$%&'*+\-.0-9A-Z^_`a-z|~]+/

readme.md

@@ -33,6 +33,7 @@ Please see the [project releases](https://socketry.github.io/protocol-http/relea
 ### v0.67.0
 
   - Parse and resolve HTTP `Range` header values according to the default headers policy.
+  - Classify malformed header values as bad requests.
 
 ### v0.66.0
 

releases.md

@@ -3,6 +3,7 @@
 ## v0.67.0
 
   - Parse and resolve HTTP `Range` header values according to the default headers policy.
+  - Classify malformed header values as bad requests.
 
 ## v0.66.0