Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #178584

Re: why does latest jessie apache2 reject _ in http request path

Show all headers | View raw

sf@debian.org writes:

> > Why is it that if I have _ in my segment, apache2 rejects the request
> > without 'HttpProtocolOptions strict'?
> 
> Try setting
> 
> Loglevel core:debug http:debug
> 
> and look if the error log provides more information.

Thanks for your help.  The above didn't show all headers, but I found
the bug in the curl function call of the client:

	curl_setopt($curl, CURLOPT_HTTPHEADER,
	  array('Content-Type: text/xml',
	    'POST $location HTTP/1.0',
 	    'Host: $site',
         ...

The last line should of course be:

        'Host: ' . $site,

Otherwise the header looks like this:

Host: $site

which then gets rejected due to the $ char in hostname.

-- Juha

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

why does latest jessie apache2 reject _ in http request path? Juha Heinanen <jh@tutpro.com> - 2017-03-08 08:20 +0100
  Re: why does latest jessie apache2 reject _ in http request path? <tomas@tuxteam.de> - 2017-03-08 10:20 +0100
    Re: why does latest jessie apache2 reject _ in http request path? Juha Heinanen <jh@tutpro.com> - 2017-03-08 10:40 +0100
      Re: why does latest jessie apache2 reject _ in http request path? Juha Heinanen <jh@tutpro.com> - 2017-03-08 10:50 +0100
      Re: why does latest jessie apache2 reject _ in http request path? tomas@tuxteam.de - 2017-03-08 11:00 +0100
  Re: why does latest jessie apache2 reject _ in http request path sf@debian.org - 2017-03-08 12:00 +0100
    Re: why does latest jessie apache2 reject _ in http request path Juha Heinanen <jh@tutpro.com> - 2017-03-08 21:10 +0100
      Re: why does latest jessie apache2 reject _ in http request path Greg Wooledge <wooledg@eeg.ccf.org> - 2017-03-08 21:10 +0100

csiph-web