fix: only remove Sec-WebSocket-Accept if present in HTTP/2 Extended CONNECT

- Check if Sec-WebSocket-Accept header exists before deleting
- This prevents unnecessary header manipulation when backend doesn't send it
- Maintains compatibility with backends that may or may not include this header

reverseproxy.go

@@ -1014,7 +1014,9 @@ func (p *reverseProxyHandler) handleBridgedExtendedConnectResponse(c *Context, r
 	responseHeader := c.Writer.Header()
 	reverseProxyCopyHeader(responseHeader, res.Header)
 	removeHopByHopHeaders(responseHeader)
+	if accept := res.Header.Get("Sec-WebSocket-Accept"); accept != "" {
 		responseHeader.Del("Sec-WebSocket-Accept")
+	}
 	c.Writer.WriteHeader(http.StatusOK)
 	if err := controller.Flush(); err != nil && !errors.Is(err, http.ErrNotSupported) {
 		backConn.Close()