The HTTP/2 code strictly validates field values, but the HTTP/3 code doesn’t do that and accepts almost anything.