Fix ipv6 address malformed

[fatelei]

my squid config

acl test_ipv6_host dst 2600:3c03::f03c:94ff:fef6:a3ae/128

acl test_ipv6_domain dstdomain .test-ipv6.com

http_access allow test_ipv6_host
http_access allow test_ipv6_domain

test script in python

import httpx

transport = httpx.HTTPTransport(proxy="http://127.0.0.1:3128")

with httpx.Client(transport=transport, timeout=30.0) as client:
    response = client.get(
        "http://[2600:3c03::f03c:94ff:fef6:a3ae]/",
        headers={"Host": "test-ipv6.com"}
    )
    print(response.status_code)

it work in http, but in https it fail

import httpx

transport = httpx.HTTPTransport(proxy="http://127.0.0.1:3128")

with httpx.Client(transport=transport, timeout=30.0) as client:
    response = client.get(
        "https://[2600:3c03::f03c:94ff:fef6:a3ae]/",
        headers={"Host": "test-ipv6.com"}
    )
    print(response.status_code)

there is relate log

2026/01/30 06:37:27.331 kid1| 33,3| Pipeline.cc(35) front: Pipeline 0x55db99641660 front 0x55db99642e802
2026/01/30 06:37:27.331 kid1| 33,3| Pipeline.cc(35) front: Pipeline 0x55db99641660 front 0x55db99642e803
2026/01/30 06:37:27.331 kid1| 33,3| Pipeline.cc(35) front: Pipeline 0x55db99641660 front 0x55db99642e803
2026/01/30 06:37:27.331 kid1| 33,3| Pipeline.cc(35) front: Pipeline 0x55db99641660 front 0x55db99642e802
2026/01/30 06:37:27.331 kid1| 33,3| Pipeline.cc(57) popMe: Pipeline 0x55db99641660 drop 0x55db99642e80*3
2026/01/30 06:37:27.331 kid1| 33,3| Pipeline.cc(31) front: Pipeline 0x55db99641660 empty
2026/01/30 06:37:27.331 kid1| 33,3| client_side.cc(990) kick: conn11 local=127.0.0.1:3128 remote=127.0.0.1:34438 FD 14 flags=1: calling readNextRequest()
2026/01/30 06:37:27.331 kid1| 33,3| client_side_request.cc(237) ~ClientHttpRequest: httpRequestFree: 0.0.10.40:3

==> /var/log/squid/access.log <==
127.0.0.1 - - [30/Jan/2026:06:37:27 +0000] "CONNECT 0.0.10.40:3 HTTP/1.1" 403 3353 TCP_DENIED:HIER_NONE 0 "-" "-" - text/html

==> /var/log/squid/cache.log <==
2026/01/30 06:37:27.332 kid1| 33,2| Server.cc(193) doClientRead: conn11 local=127.0.0.1:3128 remote=127.0.0.1:34438 FD 14 flags=1: got flag -1; (104) Connection reset by peer
2026/01/30 06:37:27.332 kid1| 33,3| client_side.cc(4005) terminateAll: 0/1 after ERR_CLIENT_GONE/errno=104
2026/01/30 06:37:27.332 kid1| 33,2| client_side.cc(617) swanSong: conn11 local=127.0.0.1:3128 remote=127.0.0.1:34438 flags=1
2026/01/30 06:37:27.332 kid1| 33,3| client_side.cc(4005) terminateAll: 0/1 after ERR_NONE/WITH_CLIENT
2026/01/30 06:37:27.332 kid1| 33,3| client_side.cc(3966) unpinConnection:
2026/01/30 06:37:27.332 kid1| 33,3| client_side.cc(673) ~ConnStateData: conn11 local=127.0.0.1:3128 remote=127.0.0.1:34438 flags=1

here it connect 0.0.10.40:3, this is not right relate issue: langgenius/dify#31637

[squid-anubis]

Cannot create a git commit message from PR title and description.

Error while parsing PR description body: the line is too long 104>72

Problematic parser input:

2026/01/30 06:37:27.331 kid1| 33,3| Pipeline.cc(35) front: Pipeline 0x55db99641660 front 0x55db99642e802

Please see PR title and description formatting requirements for more details.

This message was added by Anubis bot. Anubis will add a new message if the error text changes. Anubis will remove M-failed-description label when there are no corresponding failures to report.

[rousskov]

I agree that Squid code should be modified. Please do not interpret my review as implying that there are no relevant Squid bugs here! Once my specific change request is addressed, if there are no new surprises, I plan to fix this PR title/description and approve this PR.

---

In my tests, the second presented python script produces an invalid CONNECT request:

2026/01/30 09:43:44.356| 11,2| client_side.cc(1237) parseHttpRequest: HTTP Client REQUEST:
---------
CONNECT 2600:3c03::f03c:94ff:fef6:a3ae:443 HTTP/1.1
Host: 2600:3c03::f03c:94ff:fef6:a3ae:443
Accept: */*

The above request has invalid target (missing brackets). That is, IMHO, an httpx bug. The Host header is similarly malformed. There is no need to discuss that httpx bug in this pull request -- we should be focusing on Squid bugs here.

Also note that its malformed IP-based Host header does not match the test-ipv6.com Host header in the Python script, but that mismatch is not necessarily an httpx bug -- headers parameter in client.get() call could refer to GET headers rather than CONNECT headers. I am only noting this here because it may help interpret the test correctly. There is no need to discuss this aspect in this pull request.

In my tests, Squid v7+ correctly rejects that malformed CONNECT:

2026/01/30 09:43:44.357| 23,2| Uri.cc(550) parse: error: garbage after host:port in CONNECT target
    exception location: Uri.cc(341) parse  rawUrl[34]=2600:3c03::f03c:94ff:fef6:a3ae:443

err=ERR_INVALID_URL/- ... 1769784224.000370     12 127.0.0.1:37452 NONE_NONE/400 3629 - 2600:3c03::f03c:94ff:fef6:a3ae:443 - HIER_NONE/- text/html

I can reproduce the 0.0.10.40:3 problem with Squid v6, which is no longer supported by the Squid Project.