You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@trafficserver.apache.org by GitBox <gi...@apache.org> on 2021/06/01 20:58:58 UTC

[GitHub] [trafficserver] rob05c commented on pull request #7905: Treat TRACE with body as bad request

rob05c commented on pull request #7905:
URL: https://github.com/apache/trafficserver/pull/7905#issuecomment-852440808


   RFC7231 says
   https://datatracker.ietf.org/doc/html/rfc7231#section-4.3.8
   
   > A client MUST NOT send a message body in a TRACE request.
   
   It doesn't say a server or cache MUST respond with an error. IMO we're conforming to the spec either way. The client has violated the spec, and we're not forbidden or required to do anything when they do. Thus, I'd lean toward following the Robustness Principle, and just ignore the body and serve them as best we can, because we can.
   
   But I don't think we're violating the RFC either way.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org