Project

General

Profile

Actions

Bug #1146

closed

Header parsing is case-sensitive

Added by Anonymous almost 17 years ago. Updated over 15 years ago.

Status:
Invalid
Priority:
Urgent
Category:
core
Target version:
ASK QUESTIONS IN Forums:

Description

Lighttpd parses HTTP headers in a case sensitive manner and thus it is unusable from many older or deviant clients for example is a case as when the Host header is sent in lowercase and the server just ignores it and fails to find the page in the virtual host.

Whiteboard: GoogleWebServer

Actions #1

Updated by Anonymous almost 17 years ago

Why is this not fixed? This is critical as it makes lighttpd completely unusable.!

Actions #2

Updated by jan almost 17 years ago

lighttpd parses headers in a case-INsensitive manner. Please provide a examples request which is failing.

Actions #3

Updated by Anonymous almost 17 years ago

An example is

lighttpd -v 1.4.15

conf ->

$HTTP[[useragent]] =~ "Jakarta" {
url.access-deny = ( "" )
}

curl -A Jakarta host url gets 403 forbidden
curl -A jakarta gets 200

contact me for more examples at lighttpd at mauilion dot com

Actions #4

Updated by jan almost 17 years ago

Replying to anonymous:

conf ->


         $HTTP["useragent"] =~ "Jakarta" {
                 url.access-deny = ( "" )
         }

should be


         $HTTP["useragent"] =~ "(?i)Jakarta" {
                 url.access-deny = ( "" )
         }

$ curl -A Jakarta host url gets 403 forbidden 
$ curl -A jakarta gets 200 
Actions #5

Updated by moo almost 17 years ago

  • Status changed from New to Fixed
  • Resolution set to invalid

see jan's note

Actions #6

Updated by stbuehler over 15 years ago

  • Status changed from Fixed to Invalid
Actions

Also available in: Atom