httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Roy T. Fielding" <>
Subject Re: multiple host headers
Date Mon, 13 Sep 2004 22:29:46 GMT
> Why do we merge multiple Host headers?  I am getting wierd things like
> this for headers_in host: ","
> This may be correct, but it caught me by surprise!

Well, it is an invalid HTTP request.  The question is, should be
"fix" it for the client by choosing either the first or last field
(potentially masking a security hole), or simply respond with 400?

What is the user agent?


View raw message