httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
Subject DO NOT REPLY [Bug 48056] submitting a multipart form over http containing a text field with the string "poste" results in a timeout on apache
Date Mon, 02 Nov 2009 16:52:49 GMT changed:

           What    |Removed                     |Added
             Status|NEEDINFO                    |NEW

--- Comment #10 from 2009-11-02 08:52:48 UTC ---
I am not using mod_security, I have even used a default installation of apache
without any changes to the configuration, or without any extra modules to
ensure this issue wasn't related to any external applications, or to any
configuration settings.

When tunneling a working request through a TCP monitor, I send the request:

POST /test-apache/submit2.html HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_1; nl-nl)
AppleWebKit/531.9 (KHTML, like Gecko) Version/4.0.3 Safari/531.9
Origin: http://localhost:5555
Content-Type: multipart/form-data;
Referer: http://localhost:5555/test-apache/submit2.html
Accept-Language: nl-nl
Accept-Encoding: gzip, deflate
Content-Length: 393
Connection: keep-alive

Content-Disposition: form-data; name="dc_title"

testing with a working page
Content-Disposition: form-data; name="bitstream_file_type5_file5"; filename=""

Content-Disposition: form-data; name="submit"

click me

And I receive the response:

HTTP/1.1 200 OK
Date: Mon, 02 Nov 2009 16:42:44 GMT
Server: Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.7a DAV/2 SVN/1.6.5
Last-Modified: Mon, 26 Oct 2009 12:35:20 GMT
ETag: "38f934-214-476d5cb6ef200"
Accept-Ranges: bytes
Content-Length: 532
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"


    <body  id="body" class="body">

<div id="wrapper">

  <form action="submit2.html" method="post" name="edit_metadata"

<input type="text" name="dc_title" value="poste"/>

<input type="file" name="bitstream_file_type5_file5"/>
<input type="submit" name="submit" value="click me"/>




Which is simply a display of the test page.

Configure bugmail:
------- You are receiving this mail because: -------
You are the assignee for the bug.

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message