DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=28037>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28037

logging: ${cookie}C matches first substring





------- Additional Comments From [EMAIL PROTECTED]  2004-03-30 04:01 -------
(This bug report supersedes bug 27823.)

%{cookname}C will log the value of the first cookie whose name includes
"cookname" as any substring.  To reproduce, configure httpd with a LogFormat 
such as

LogFormat ${cook}C %t \"%r\" %>s %b" commontest
CustomLog logs/access_log commontest

Now test it with a cookie header that starts with a cookie named "logcookie":

GET -d -H 'Cookie: logcookie=wrong_value; cook=right_value' http://127.0.0.1/

Examine access_log and see that the wrong_value has been captured:

127.0.0.1 e=wrong_value - [29/Mar/2004:22:59:08 -0500] "GET / HTTP/1.1" 200 1456

The attached patch fixes this bug, and also brings %{...}C into compliance with
RFC 2109, which says that cookie names are case-independent and white space
is permitted around the '=' separating the name and value.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to