httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jeff Trawick <traw...@attglobal.net>
Subject [PATCH] don't send Server header field as set by CGI or module
Date Thu, 05 Jun 2003 20:34:20 GMT
I think the doors were opened up too far with this fix, which was 
apparently intended to respect Server as set by the origin server for a 
proxy request:

http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/http/http_protocol.c.diff?r1=1.399&r2=1.400

Attached is an alternate, which matches 1.3 AFAICT.  I need to test it 
with proxy to make sure proxyreq is set properly, but I have at least 
confirmed that a CGI script can't decide what Server we should report.

Any concerns before I test further and commit?

Mime
View raw message