httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 44477] New: - Apache accepts lowercase input
Date Sun, 24 Feb 2008 12:11:43 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<https://issues.apache.org/bugzilla/show_bug.cgi?id=44477>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

https://issues.apache.org/bugzilla/show_bug.cgi?id=44477

           Summary: Apache accepts lowercase input
           Product: Apache httpd-2
           Version: 2.2.8
          Platform: PC
        OS/Version: other
            Status: NEW
          Keywords: RFC
          Severity: minor
          Priority: P2
         Component: Core
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: dav7@dav7.net


[Note that the case (ie UPPER- or lowercase) of text in "double quotes" should
be paid attention to in this ticket.]

Apache's directory redirection engine accepts lowercase input.

To reproduce behavior (confirmed by one other person):

#1. Create the folder "/foo" (or whatever, the directory name doesn't matter) on
any server.
#2. Telnet or use "nc" to connect to your server. Be sure to specify port 80.
#3. Send "get /foo" and Apache will return the standard 301 "this is located at
/foo/" (note the trailing slash).
#4. Now send "get /foo/" and notice how Apache sends a 501 - "Not Implemented."
#5. Finally, send "GET /foo/" and you will recieve the correct response.

To expound/recap/emphasize, the bug appears in #3, where Apache returns 301 -
"Moved Permanently" after a lowercase command was sent, instead of returning
501, which it should to be standards conformant.

Note that Apache will send a 501 if you send "get /thisdirdoesntexist", where
'thisdirdoesntexist' is a directory on the server that, well, doesn't exist.
This has only been tested on my system, and not tested elsewhere.

-dav7

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message