Project

General

Profile

Actions
Copy link

Bug #1146

closed

Header parsing is case-sensitive

Added by Anonymous over 17 years ago. Updated about 16 years ago.

Status:
Invalid
Priority:
Urgent
Category:
core
Target version:
1.5.0
ASK QUESTIONS IN Forums:

Description

Lighttpd parses HTTP headers in a case sensitive manner and thus it is unusable from many older or deviant clients for example is a case as when the Host header is sent in lowercase and the server just ignores it and fails to find the page in the virtual host.

Whiteboard: GoogleWebServer

Actions
Copy link
 #1

Updated by Anonymous over 17 years ago

Why is this not fixed? This is critical as it makes lighttpd completely unusable.!

Actions
Copy link
 #2

Updated by jan over 17 years ago

lighttpd parses headers in a case-INsensitive manner. Please provide a examples request which is failing.

Actions
Copy link
 #3

Updated by Anonymous over 17 years ago

An example is

lighttpd -v 1.4.15

conf -> 

$HTTP[[useragent]] =~ "Jakarta" {
                url.access-deny = ( "" )
        }

curl -A Jakarta host url gets 403 forbidden
curl -A jakarta gets 200

contact me for more examples at lighttpd at mauilion dot com

Actions
Copy link
 #4

Updated by jan over 17 years ago

Replying to anonymous:

conf ->


         $HTTP["useragent"] =~ "Jakarta" {
                 url.access-deny = ( "" )
         }

should be


         $HTTP["useragent"] =~ "(?i)Jakarta" {
                 url.access-deny = ( "" )
         }


$ curl -A Jakarta host url gets 403 forbidden 
$ curl -A jakarta gets 200
Actions
Copy link
 #5

Updated by moo over 17 years ago

  • Status changed from New to Fixed
  • Resolution set to invalid

see jan's note

Actions
Copy link
 #6

Updated by stbuehler about 16 years ago

  • Status changed from Fixed to Invalid
Actions
Copy link

Also available in: Atom