You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2015/12/11 20:15:08 UTC

[Bug 58724] New: ProxyPassReverse does not rewrite Location headers starting with // (instead of http:// or https://)

https://bz.apache.org/bugzilla/show_bug.cgi?id=58724

            Bug ID: 58724
           Summary: ProxyPassReverse does not rewrite Location headers
                    starting with // (instead of http:// or https://)
           Product: Apache httpd-2
           Version: 2.4.17
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_proxy
          Assignee: bugs@httpd.apache.org
          Reporter: apache-bugs.a2@x25.pl

ProxyPassReverse does not rewrite Location headers starting with // (like
Location: //domain.com/move-here). It works only for http:// or https:// but
not //

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 58724] ProxyPassReverse does not rewrite Location headers starting with // (instead of http:// or https://)

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=58724

William A. Rowe Jr. <wr...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #1 from William A. Rowe Jr. <wr...@apache.org> ---
You are correct, it does not,

https://tools.ietf.org/html/rfc3986#section-3

Without the 'scheme:' prefix the Location is not a valid base URI, and cannot
be distinguished between a //machine and the resource //foo.

Therefore this behavior is by design.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org