[ docs ] Show current state of issues

[yonas]

Putting this here for GitHub to show us the current state of every issue:

Panics / hangs / denial of service

Fixed

• Denial of service when the server sends an infinitely large header neonmoe/minreq#55
• Denial of service if the server sends the same header over and over with different values sbstp/attohttpc#102
• Panic on large amount of headers sbstp/attohttpc#101
• panic 'year must be in the range -100000..=100000' on some websites algesten/hreq#40
• Panic on some websites: 'assertion failed: sz <= self.window_size' algesten/hreq#39
• Panic on some websites: "Incoming body is not valid utf-8" algesten/hreq#38
• awc panics if redirected to an IP address (not a DNS name) when using rustls actix/actix-web#2100
• Panic in both client and server: "Empty response" http-rs/async-h1#184
• Times out fetching http://google.com SergejJurecko/mio_httpc#25
• Panic on index out of bounds in /src/types.rs:285:50 SergejJurecko/mio_httpc#27
• Panic on unwrapping in /src/resolve/mod.rs:18:37 on some websites SergejJurecko/mio_httpc#28
• Timeout does not appear to work SergejJurecko/mio_httpc#30
• DoS via crafted content-length header neonmoe/minreq#63

Not fixed

I imagine contributions on these are welcome.

• Denial of service when the server sends an infinitely large header http-rs/surf#298
• Panic at 'dangling store key for stream_id=StreamId(1)' when downloading http://auctionzip.com algesten/hreq#41
• Panic at 'dangling store key for stream_id=StreamId(1)' when downloading http://auctionzip.com algesten/hreq#41
• Panic on some websites with async-h1 backend: "String slice should be valid ASCII" http-rs/surf#284

Improper timeout handling

Three clients all were resetting the timeout on redirects, so a request could take far longer than specified by the user:

• Timeout not honored (program hang?) on some websites sbstp/attohttpc#85
• Timeout not honored (program hang?) on some websites algesten/ureq#312
• Timeout not honored (program hang?) on some websites SergejJurecko/mio_httpc#33

Plus a bunch of other issues related to timeouts:

• Request timeout not honored (program hang?) neonmoe/minreq#52
• copy_with_timeout() may exceed its timeout jayjamesjay/http_req#46
• Docs on BlockingClientBuilder::timeout() are misleading seanmonstar/reqwest#1161

Other issues

Fixed

• "proto: Failed to parse 'index.html' relative to: index.html" error on some websites algesten/hreq#47
• "EOF before complete http11 header" error on some websites algesten/hreq#46
• "Other h2 error (poll_data): protocol error: flow-control protocol violated" error on some websites algesten/hreq#45
• "http api: invalid format" error on some websites algesten/hreq#44
• "broken pipe" error on some websites algesten/hreq#43
• "CloseNotify alert received" error on some websites algesten/hreq#42
• awc: "Payload reached size limit" error on 6% of websites actix/actix-web#2101
• awc panics if redirected to an IP address (not a DNS name) when using rustls actix/actix-web#2100
• Fails with "Missing location" on some websites adamreichold/zeptohttpc#8
• Fails with "Invalid chunk size" error on some websites adamreichold/zeptohttpc#7
• Fails with "corrupt deflate stream" on some websites adamreichold/zeptohttpc#5
• fails with "Missing scheme" error on some websites adamreichold/zeptohttpc#4
• Fails with "Error: invalid gzip header" on 40% of websites adamreichold/zeptohttpc#3
• fails with "IO error: failed to fill whole buffer" on some websites SergejJurecko/mio_httpc#36
• fails with "Error parsing chunked transfer" on some websites SergejJurecko/mio_httpc#34
• "invalid port value" error on some websites neonmoe/minreq#51
• "non-usize chunk length with transfer-encoding: chunked" error on some websites neonmoe/minreq#50
• "infinite redirection loop detected" error on many websites, but Firefox and curl work fine neonmoe/minreq#49
• "received corrupt message" error on many websites neonmoe/minreq#48
• "InvalidResponse: invalid header" error on some websites sbstp/attohttpc#94
• "missing or invalid location header" error on some websites sbstp/attohttpc#93
• "Http Error: invalid HTTP header name" on some websites sbstp/attohttpc#92
• "invalid chunk size" error on some websites sbstp/attohttpc#91
• "Httparse error: too many headers" error on many websites SergejJurecko/mio_httpc#32
• "Chunk was larger than configured CallBuilder::chunked_max_chunk" error on >3% of websites SergejJurecko/mio_httpc#31
• Can't connect to websites that redirect to an IP address (InvalidDNSNameError) algesten/ureq#323
• "Header field didn't end with \r" error on some websites algesten/ureq#321
• "Network Error: stream did not contain valid UTF-8" error, even with 'charset' enabled algesten/ureq#320
• "Bad Status: Wrong number of tokens in status line" error on some websites algesten/ureq#316
• awc: "protocol error: unexpected internal error encountered" on some websites actix/actix-web#2107
• awc: "Invalid URL: Missing URL scheme" error on some websites actix/actix-web#2105
• "error trying to connect: invalid dnsname" on some websites seanmonstar/reqwest#1220
• awc: "Invalid Header provided" error on some websites actix/actix-web#2103
• awc: "Invalid URL: URL parse error: invalid format" error on some websites actix/actix-web#2102
• "Error while decoding chunks" on some websites algesten/ureq#325
• "Network Error: Connection reset by peer (os error 104)" error on many websites algesten/ureq#318
• "Network Error: unexpected end of file" error on some websites algesten/ureq#317
• 'http2 unspecific protocol error detected' on some websites seanmonstar/reqwest#1190
• 'invalid HTTP header parsed' error on some websites seanmonstar/reqwest#1189
• "relative URL without a base" error on some websites http-rs/surf#286

Not fixed

• "Too many chars in chunk size" error on some websites algesten/hreq#49
• "Unexpected char in chunk size: ' '" error on some websites algesten/hreq#48
• "http2 error: protocol error: unexpected internal error encountered" on some websites seanmonstar/reqwest#1222
• Intermittent "channel closed" errors seanmonstar/reqwest#1221
• awc: "IO error: bytes remaining on stream" on some websites actix/actix-web#2106
• awc: "URL parse error: invalid uri character" error on some wbesites actix/actix-web#2104
• fails with "HTTP invalid URI: invalid format" error on some websites adamreichold/zeptohttpc#6
• "Chunk was larger than configured CallBuilder::chunked_max_chunk" error even in v0.9.4 SergejJurecko/mio_httpc#35
• "Head byte length should be less than 8kb" error on some websites http-rs/surf#289
• "invalid header value" error on some websites http-rs/surf#288
• HTTP/1.0 support http-rs/surf#287
• "Error: could not decode body as UTF-8" on some websites. http-rs/surf#285
• "InvalidResponse: invalid status code" error on some websites sbstp/attohttpc#95
• "Unexpected end of file" error on a few websites sbstp/attohttpc#90
• 'Invalid gzip header' error on some websites sbstp/attohttpc#89
• 'Corrupt deflate stream' error on some websites (curl and Firefox are fine) sbstp/attohttpc#84

Feature requests

Fixed

• Automatically pick up SOCKS configuration from environment variables algesten/ureq#322
• Restore support for native-tls algesten/ureq#319
• Please add support for setting request timeout http-rs/surf#274

Source: https://www.reddit.com/r/rust/comments/oir1g1/ive_tested_rust_http_clients_again_found_over_50/