[Boxxed]

Cool! Looks pretty lightweight. Skimming the code, I see some uses of strtok that look unsafe...I think a URL consisting of entirely `?` will crash.

Yep:

  Server listening at http://0.0.0.0:5000
  Parse error: HPE_INVALID_URL Unexpected start char in url
  free(): double free detected in tcache 2
  [1]    70550 IOT instruction (core dumped)  

(Opened an issue on github)

[james_roberts]

Thanks so much for reporting a bug! You created the first issue for the project! I'll definitely have a look into this and push a fix