diff --git a/src/PVE/APIServer/AnyEvent.pm b/src/PVE/APIServer/AnyEvent.pm
index 9de6238..877a4e6 100644
--- a/src/PVE/APIServer/AnyEvent.pm
+++ b/src/PVE/APIServer/AnyEvent.pm
@@ -1578,6 +1578,7 @@ sub push_request_header {
 			# if an '@' comes before the first slash proxy forwarding might consider
 			# the frist part of the url to be part of an authority...
 			$self->error($reqstate, 400, "invalid url");
+			return;
 		    }
 
 		    $self->{request_count}++; # only count valid request headers