sqlmapproject/sqlmap · error · H2ProtocolError

invalid control character in HTTP field value

Error message

invalid control character in HTTP field value

What it means

Error "invalid control character in HTTP field value" thrown in sqlmapproject/sqlmap.

Source

Thrown at lib/request/http2.py:685

def _iter_header_items(headers):
    if headers is None:
        return []
    if hasattr(headers, "items"):
        return list(headers.items())
    return list(headers)


def _validate_regular_name(name):
    if not name or name.startswith(b":"):
        raise H2ProtocolError("invalid regular field name")
    for item in bytearray(name):
        if item not in _TOKEN_BYTES:
            raise H2ProtocolError("invalid HTTP field name %r" % name)


def _validate_field_value(value):
    if b"\x00" in value or b"\r" in value or b"\n" in value:
        raise H2ProtocolError("invalid control character in HTTP field value")
    if value[:1] in (b" ", b"\t") or value[-1:] in (b" ", b"\t"):
        raise H2ProtocolError("HTTP/2 field values may not have leading/trailing whitespace")


def _validate_pseudo_value(name, value):
    _validate_field_value(value)
    for item in bytearray(value):
        if item < 0x21 or item > 0x7e:
            raise H2ProtocolError("invalid octet in %s pseudo-field" % name)


def _validate_method(method):
    if not method:
        raise H2ProtocolError("method is required")
    for item in bytearray(method):
        if item not in _METHOD_TOKEN_BYTES:
            raise H2ProtocolError("invalid HTTP method token")

View on GitHub (pinned to 0a35b20e39)

When it happens

Trigger: Thrown at lib/request/http2.py:685 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of sqlmapproject/sqlmap@0a35b20e39 (2026-08-26). Data as JSON: /api/errors/eb5bedd7d25a59ce. Report an issue: GitHub.