You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Ian Huynh <ia...@hubspan.com> on 2005/05/18 21:43:25 UTC
[users@httpd] possible bug? apache truncates part of the content-type http header if the header is folded
Env: Win2K Server, Apache 2.0.52 up to 2.0.54
We are running apache + mod_proxy + mod_rewrite as a reverse proxy for a backend J2EE server. We've observed that if the J2EE server returns a Content-Type with the following value:
Content-Type: multipart/signed;
[\t]micalg=sha1;
[\t]protocol="application/pkcs7-signature";
[\t]boundary="Part_10_15429741.1116261846632"
Apache will drop the parameter protocol and micalg and return this Content-Type to the client
Content-Type: multipart/signed;
[\r\n\t]boundary="Part_10_15429741.1116261846632"
However, if the content-type header is not folded the content-type is returned unchanged
It looks like when a content-type (only content-type header, other headers are not affected) is folded,
only the last parameter is picked up and returned to the client.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] possible bug? apache truncates part of the content-type
http header if the header is folded
Posted by Nick Kew <ni...@webthing.com>.
Ian Huynh wrote:
> Env: Win2K Server, Apache 2.0.52 up to 2.0.54
>
> We are running apache + mod_proxy + mod_rewrite as a reverse proxy for a backend J2EE server. We've observed that if the J2EE server returns a Content-Type with the following value:
>
> Content-Type: multipart/signed;
> [\t]micalg=sha1;
> [\t]protocol="application/pkcs7-signature";
> [\t]boundary="Part_10_15429741.1116261846632"
>
> Apache will drop the parameter protocol and micalg and return this Content-Type to the client
>
> Content-Type: multipart/signed;
> [\r\n\t]boundary="Part_10_15429741.1116261846632"
>
> However, if the content-type header is not folded the content-type is returned unchanged
>
> It looks like when a content-type (only content-type header, other headers are not affected) is folded,
> only the last parameter is picked up and returned to the client.
I haven't tested that, but it smells of a genuine bug (your description
is far more coherent than we expect from the people who submit bug
reports because they haven't read TFM). If you don't get a better
reply here, it might be worth an entry in bugzilla.
--
Nick Kew
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org