www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Pedro R3 Junior <p...@stj.gov.br>
Subject mod_proxy/870: mod-proxy runs like a redirect directive in a particular situation
Date Tue, 15 Jul 1997 20:50:01 GMT

>Number:         870
>Category:       mod_proxy
>Synopsis:       mod-proxy runs like a redirect directive in a particular situation
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache (Apache HTTP Project)
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Tue Jul 15 13:50:01 1997
>Originator:     pr3j@stj.gov.br
>Organization:
apache
>Release:        1.2.0 and 1.2.1
>Environment:
FreeBSD 2.2.1
>Description:
The problem was first described as a support request in PR#858.
Maybe there are some relations with PR#614 too.

The problem occurs when you have three conditions:

1. Proxy translation.
AND
2. Submit button in form page.
AND
3. IP URLs answers in the "real" server.

  When you get a page throught the proxy, use a submit button in this page
and this button returns a IP URL (like http://10.0.0.1/page2.html), the
proxy donīt translate the IP address to the Proxy Server Name.
  It works like a redirection. If the IP is a dummy, the client is unable
to get the page pointed by the cgi in submit button.
  The URLs in PR#858 shows the problem.
>How-To-Repeat:
1. Put a server (www1) with a form page with a submit button.
   The submit button has a IP URL as answer (ex. http://10.0.0.1/page2.html)
   www1 - 10.0.0.1
   index.html and page2.html
2. Put an Apache 1.2 (www2) with proxy module and a proxyPass directive:
   www2 - 10.0.0.2
   ProxyPass /teste http://www1
3. Get one page in www1 throught the proxy www2
   http://www2/teste/index.html
4. Use the submit button.
   The proxy will make a redirect (not a proxy) to www1.
   It will return 10.0.0.1/... when the right was www2/...

The problem occurs just when www1 returns an IP number in the URL.
>Fix:
I tested two ways:

1. Make all redirected pages with named URLs (mainly the cgi ones).
2. Use Apache 1.1.3 - The problem donīt occurs here
>Audit-Trail:
>Unformatted:



Mime
View raw message