79650591

Date: 2025-06-03 03:42:12
Score: 2
Natty:
Report link

yes, http.Client is not closed.

i found one thing, golang http.Client has a param 'ForceAttemptHTTP2'. it will use http2 first, except the server response is http1. And if you don't close body when use http2, theres's no leak.

here is a command to check where server supports http2.0.

curl -I -v --http2 example.com/xxx/xxx

then you can see ALPN details for http2.0.

Reasons:
  • No code block (0.5):
  • Self-answer (0.5):
  • Low reputation (1):
Posted by: tim