You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2018/03/21 19:20:16 UTC

[Bug 62208] New: ProxyPassReverseCookieDomain replaces cookie value instead of domain if cookie name ends with "domain"

https://bz.apache.org/bugzilla/show_bug.cgi?id=62208

            Bug ID: 62208
           Summary: ProxyPassReverseCookieDomain replaces cookie value
                    instead of domain if cookie name ends with "domain"
           Product: Apache httpd-2
           Version: 2.4.29
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_proxy
          Assignee: bugs@httpd.apache.org
          Reporter: matthias.lehr@siemens.com
  Target Milestone: ---

i stumbled upon this, when i tried to set a domain for a "domainless" 
proxied cookie (related: Bug 44322, thanx for the 
ProxyPassReverseCookiePath path trick ;-) )

How to reproduce
response header line from origin server

Set-Cookie: MYDOMAIN=test.somewhere.com; domain=.somewhere.com

proxy directive
ProxyPassReverseCookieDomain somewhere.com other.somewhere.com

results in response header from proxy
Set-Cookie: MYDOMAIN=other.somewhere.com; domain=.somewhere.com

but should be  
Set-Cookie: MYDOMAIN=test.somewhere.com; domain=other.somewhere.com

BUG: value instead of domain was replaced 

same for ProxyPassReverseCookiePath
the search/replace should start after the corresponding separator ";"

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 62208] ProxyPassReverseCookieDomain replaces cookie value instead of domain if cookie name ends with "domain"

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62208

Christophe JAILLET <ch...@wanadoo.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |DUPLICATE
             Status|NEW                         |RESOLVED

--- Comment #1 from Christophe JAILLET <ch...@wanadoo.fr> ---
Looks like a duplicate of  bug 61560.
This is fixed in 2.4.34.

Should you still have this issue, feel free to re-open.

*** This bug has been marked as a duplicate of bug 61560 ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org