Re: Mergine of Multiple Cookie Headers

2016-06-30 Thread Joseph Schaefer
Most cookies don't use quoted values tho, and I'm not sure what this does for those. Sent from my iPhone > On Jun 30, 2016, at 10:51 AM, Yann Ylavic wrote: > > On Thu, Jun 30, 2016 at 4:46 PM, Rainer Canavan > wrote: >> On Wed, Jun 29, 2016 at 10:27 AM, Yann Ylavic wrote: >>> >>> RequestHea

Re: Mergine of Multiple Cookie Headers

2016-06-30 Thread Yann Ylavic
On Thu, Jun 30, 2016 at 4:46 PM, Rainer Canavan wrote: > On Wed, Jun 29, 2016 at 10:27 AM, Yann Ylavic wrote: >> >> RequestHeader edit* Cookie >> ([^=;,]++)(="(?:[^"].)*+[^"]*+"|[^;,]*)?+[;,] $1$2; early > > I have to admit that I'd never have thought of using mod_headers. Both > solution

Re: Mergine of Multiple Cookie Headers

2016-06-30 Thread Rainer Canavan
On Wed, Jun 29, 2016 at 10:27 AM, Yann Ylavic wrote: > On Wed, Jun 29, 2016 at 9:33 AM, Plüm, Rüdiger, Vodafone Group > wrote: [..] >>> We've observed multiple gateways, operated by e.g. AT&T, COLT and >>> Vodafone, that inject additional Cookie: headers into client requests, >>> such as >>> >>>

Re: Mergine of Multiple Cookie Headers

2016-06-29 Thread Yann Ylavic
On Wed, Jun 29, 2016 at 9:33 AM, Plüm, Rüdiger, Vodafone Group wrote: > > >> -Original Message- >> From: Rainer Canavan [mailto:rainer.cana...@sevenval.com] >> Sent: Dienstag, 28. Juni 2016 16:30 >> To: dev@httpd.apache.org >> Subject: Mergine

RE: Mergine of Multiple Cookie Headers

2016-06-29 Thread Plüm , Rüdiger , Vodafone Group
> -Original Message- > From: Rainer Canavan [mailto:rainer.cana...@sevenval.com] > Sent: Dienstag, 28. Juni 2016 16:30 > To: dev@httpd.apache.org > Subject: Mergine of Multiple Cookie Headers > > Hi, > > We've observed multiple gateways, operated by e.g.

Re: Mergine of Multiple Cookie Headers

2016-06-28 Thread Graham Leggett
On 28 Jun 2016, at 4:29 PM, Rainer Canavan wrote: > We've observed multiple gateways, operated by e.g. AT&T, COLT and > Vodafone, that inject additional Cookie: headers into client requests, > such as > > Cookie: actually=from_the_client > Cookie: Bearer-Type=w-TCP > Cookie: network-access-type=

Mergine of Multiple Cookie Headers

2016-06-28 Thread Rainer Canavan
Hi, We've observed multiple gateways, operated by e.g. AT&T, COLT and Vodafone, that inject additional Cookie: headers into client requests, such as Cookie: actually=from_the_client Cookie: Bearer-Type=w-TCP Cookie: network-access-type=UMTS Apache httpd merges those headers into a single, comma