>Number: 1225 >Category: protocol >Synopsis: Apache doesn't have a way to dump the body of a POST before >sending a response. >Confidential: no >Severity: serious >Priority: medium >Responsible: apache >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Tue Oct 14 14:10:00 PDT 1997 >Last-Modified: >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.2.4 >Environment: HP-UX 9.05, HP paid-for ANSI compiler. Windows NT 4 + various Windows95 boxes. >Description: MSIE 3.x and 4.x: MSIE can't handle getting an error response back from the server before it has finished transmitting the body of a POST (possibly PUT?) to the server.
The exact error I'm sending back is '401 -- Authorization Required'. MSIE is bad at not sending authorization data when it should. It locks and never finishes the transaction. Hitting 'stop' works to stop the browser, but the POST is never finished correctly. >How-To-Repeat: Sorry, I don't have a URL. Construct a big HONKIN' form with a many fields. You need enough data to be sent to fill up several packets. Submit the form to a URL that requires authorization. *brrrrnt*. Watch it hang. >Fix: Kludge Apache to have another environmental variable (like force-response-1.0 or the like) to tell it to soak up the body (and discard) if a browser does a POST but is unable to handle the response early. Perhaps 'soak-body-before-responding' would be a good name for the env. var >Audit-Trail: >Unformatted:
