diff -r ef6827505bd2 -r 98462e878ca7 src/server/daemon/sessionhandler.c
--- a/src/server/daemon/sessionhandler.c	Mon Mar 06 17:32:26 2017 +0100
+++ b/src/server/daemon/sessionhandler.c	Wed Aug 30 21:53:08 2017 +0200
@@ -163,6 +163,11 @@
         }
         buf->cursize += r;
     }
+    if(!http_parser_validate(parser)) {
+        log_ereport(LOG_FAILURE, "http_parser_validate failed");
+        // TODO: send error 400 bad request
+        return NULL;
+    }
     
     // process request
     r = handle_request(&request, NULL); // TODO: use correct thread pool
@@ -313,8 +318,15 @@
         event->finish = evt_request_error;
         io->error = 3;
         return 0;
+    }  
+    
+    if(!http_parser_validate(parser)) {
+        log_ereport(LOG_FAILURE, "http_parser_validate failed");
+        // TODO: send error 400 bad request
+        //event->finish = evt_request_error;
+        //return 0;
     }
-     
+    
     /*
      * process request
      *