httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dick Snippe <>
Subject Re: [Patch 30399] New directive CacheIgnoreHeaders to prevent user defined headers from being stored by mod_cache
Date Wed, 05 Jan 2005 12:45:15 GMT
On Thu, Dec 30, 2004 at 09:23:39PM +0000, Nick Kew wrote:

> On Thu, 30 Dec 2004, Dick Snippe wrote:
> > cachable pages. Prior to apache 2.0.50 this wasn't a very big issue; these
> > pages would be cached, many people would be using the same cookie and that
> > was that. However, after apache-2.0.50 apache would store cookies as well.
> > This resulted in storing multiple cookies for the same web page which
> > confused tomcat to the point of breaking.
> Can you not work around this with your own "Header set" directives to
> override your application's cookies with the proxy's own, or indeed
> unset them?

I tried that once, but I never got it working. Simply unset all "Set-Cookie"
headers doesn't work, because that would also remove them at places where
they're needed (typically for "Cache-Control: private" pages that use
cookies to track login status etc.)
So, I'd need to unset them only for cachable pages.
Using mod_headers I don't see how this could be done.
An environment variable would need to be set. But SetEnvIf can only look at
the request headers; not at the response headers.
Perhaps if SetEnvIf could look at the response headers generated by the
origin server (tomcat in this case) it'd be possible to emulate all the
cachability tests in mod_cache.c But frankly, I'd rather not go there.

> > Fortunately the CacheIgnoreHeaders patch solves exactly this problem for us!
> > We use it in production on rather busy sites and it works perfectly.
> > Since I'd rather use regular apache-2.0.x versions instead of CVS checkouts,
> > I'd like to see this patch backported to 2.0.x, please.
> Nothing against backporting the patch, but I'd need to review it before
> voting +1 (as opposed to +0).

All I can say is that it works perfectly for us.

Dick Snippe - Publieke Omroep Internet Services
Mediacentrum kamer 138 Sumatralaan 45 Hilversum  \ fight war
tel +31 35 6774252, email []()   \ not wars

View raw message