sqlmapproject/sqlmap · error · H2ProtocolError

invalid HTTP method token

Error message

invalid HTTP method token

What it means

Error "invalid HTTP method token" thrown in sqlmapproject/sqlmap.

Source

Thrown at lib/request/http2.py:702

    if b"\x00" in value or b"\r" in value or b"\n" in value:
        raise H2ProtocolError("invalid control character in HTTP field value")
    if value[:1] in (b" ", b"\t") or value[-1:] in (b" ", b"\t"):
        raise H2ProtocolError("HTTP/2 field values may not have leading/trailing whitespace")


def _validate_pseudo_value(name, value):
    _validate_field_value(value)
    for item in bytearray(value):
        if item < 0x21 or item > 0x7e:
            raise H2ProtocolError("invalid octet in %s pseudo-field" % name)


def _validate_method(method):
    if not method:
        raise H2ProtocolError("method is required")
    for item in bytearray(method):
        if item not in _METHOD_TOKEN_BYTES:
            raise H2ProtocolError("invalid HTTP method token")


def _normalize_request_headers(headers, body):
    raw_items = []
    connection_tokens = set()
    for key, value in _iter_header_items(headers):
        name = _as_bytes(key).lower()
        val = _as_bytes(value)
        if name.startswith(b":"):
            raise H2ProtocolError("callers may not inject HTTP/2 pseudo-fields")
        _validate_regular_name(name)
        _validate_field_value(val)
        raw_items.append((name, val))
        if name == b"connection":
            for token in val.split(b","):
                token = token.strip().lower()
                if token:
                    _validate_regular_name(token)

View on GitHub (pinned to 0a35b20e39)

When it happens

Trigger: Thrown at lib/request/http2.py:702 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of sqlmapproject/sqlmap@0a35b20e39 (2026-08-26). Data as JSON: /api/errors/5abc030d0f377b40. Report an issue: GitHub.