[patrick-immometrica]

Since #843, an asterisk-form path can be combined with a scheme and authority, which h2 needs for OPTIONS *. Display then writes the path straight after the authority:

let uri = Uri::builder()
    .scheme("https")
    .authority("example.com")
    .path_and_query("*")
    .build()
    .unwrap();
assert_eq!(uri.to_string(), "https://example.com*");

example.com* is a different authority. hyper's h1 client formats the request target with Display, so an OPTIONS * sent through an HTTP proxy in absolute form ends up with the wrong host on the wire.

RFC 9112 3.2.4 says the absolute form of an asterisk-form request has an empty path (OPTIONS http://example.com HTTP/1.1), so this skips writing * when there is an authority. path() still returns "*", and only Display changes.

I extended the existing build_star_for_http2 test. It fails on master:

  left: "https://example.com*"
 right: "https://example.com"

Note that the output no longer round-trips to an equal Uri, since it reparses with path /. I think that's fine because the old output didn't round-trip either, and it parsed to the wrong host.