You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2014/02/22 00:04:56 UTC
[Bug 56176] New: mod_substitute truncates the response body if the
"Line is too long"
https://issues.apache.org/bugzilla/show_bug.cgi?id=56176
Bug ID: 56176
Summary: mod_substitute truncates the response body if the
"Line is too long"
Product: Apache httpd-2
Version: 2.4.7
Hardware: PC
OS: Mac OS X 10.4
Status: NEW
Severity: normal
Priority: P2
Component: mod_substitute
Assignee: bugs@httpd.apache.org
Reporter: dan@danshome.net
The following fix added in 2.3.15
"mod_substitute: To prevent overboarding memory usage, limit line length to
1MB. [Stefan Fritsch]"
causes any line in the response body that is over 1MB to be omitted from the
response, delivering a partial response, and the following entry is logged
"[Fri Feb 21 16:23:46.440472 2014] [substitute:error] [pid 3912:tid 2600]
[client 192.168.0.5:62707] AH01328: Line too long, URI
/secure/foo/bar/Main.aspx, referer:
https://myhost/secure/foo/bar/Main.aspx?evt=2001&src=Main.aspx.2001"
Especially considering that Apache still responds with an HTTP 200 status code,
I would think the proper response would be for mod_substitute to just return
the line without parsing it, because returning a partial response just ends up
corrupting the response.
I can see the argument that you may not want to return a line if substitutions
fail, but I don't think that should be the default behavior or you should at
least provide the ability to define the default behavior.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 56176] mod_substitute truncates the response body if the "Line
is too long"
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56176
Dan McLaughlin <da...@danshome.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
OS|Mac OS X 10.4 |Windows Server 2008 R2
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 56176] mod_substitute truncates the response body if the "Line
is too long"
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56176
Jochen Wezel <jw...@compumaster.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |jwezel@compumaster.de
OS| |All
--- Comment #1 from Jochen Wezel <jw...@compumaster.de> ---
>for mod_substitute to just return the line without parsing it
for security reasons as well as corporate image reasons, this might be very
dangerous
better just fail with a server error (e.g. HTTP 500 or 500.100 or similar
value) so that it's obvious that something went wrong with it
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org