https://issues.apache.org/bugzilla/show_bug.cgi?id=50563

           Summary: improperly truncated ipv6 address in
                    HTTP_X_FORWARDED_HOST variable
           Product: Apache httpd-2
           Version: 2.2.3
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_proxy_http
        AssignedTo: [email protected]
        ReportedBy: [email protected]


We have two apache servers in a ProxyPass configuration, with the public
address being an IPv6 address of https://[fd66:4613:4146:1::82]/. The Django
web framework uses the HTTP_X_FORWARDED_HOST variable to determine the host to
use for redirection, and apache passes this

HTTP_X_FORWARDED_HOST = [fd66

It looks like some code is naively assuming ipv4 and stripping everything after
the colon. This is breaking http redirects from Django and anyone else relying
on that variable.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to