From 62dd45dd08e83238231ba50788dde356bb0e4e2c Mon Sep 17 00:00:00 2001 From: TekH Date: Mon, 16 Mar 2026 09:44:41 +0100 Subject: [PATCH] Restrict Kestrel server to HTTP/1 protocol in config Added "Kestrel" section to appsettings.json to set endpoint default protocol to HTTP/1, preventing use of HTTP/2 or other protocols. --- appsettings.json | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/appsettings.json b/appsettings.json index 10f68b8..fd414e6 100644 --- a/appsettings.json +++ b/appsettings.json @@ -5,5 +5,10 @@ "Microsoft.AspNetCore": "Warning" } }, - "AllowedHosts": "*" + "AllowedHosts": "*", + "Kestrel": { + "EndpointDefaults": { + "Protocols": "Http1" + } + } }