You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2015/10/03 04:40:29 UTC

[Bug 58475] New: Support append/merge with semicolon-separated headers

https://bz.apache.org/bugzilla/show_bug.cgi?id=58475

            Bug ID: 58475
           Summary: Support append/merge with semicolon-separated headers
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_headers
          Assignee: bugs@httpd.apache.org
          Reporter: kevin@kevinlocke.name

Currently the append and merge actions for Header assume that the value is a
comma-separated list.  Although this is the case for most headers,
Content-Security-Policy is a notable exception, and one for which merged
configurations are not unlikely (since different directives may have different
stakeholders and be configured in different places).

It would be great if the append and merge actions provided a way to support
such headers, either by providing a way to specify the list separator (such as
treating the replacement argument as separator for these actions), or by
changing behavior based on the header name.

If neither of those solutions is acceptable, perhaps adding a note to the
documentation about how to use edit to emulate append or merge would be
appropriate.  It's pretty straight-forward, but requires a bit of care in the
regex to avoid errors and using setifempty before edit to ensure the header is
set.   I documented the procedure I am using at
https://kevinlocke.name/bits/2015/10/02/setting-content-security-policy-with-mod_headers/
which may be useful for comparison.

Thanks for considering,
Kevin

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org