https://issues.apache.org/bugzilla/show_bug.cgi?id=50563
Summary: improperly truncated ipv6 address in
HTTP_X_FORWARDED_HOST variable
Product: Apache httpd-2
Version: 2.2.3
Platform: PC
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_proxy_http
AssignedTo: [email protected]
ReportedBy: [email protected]
We have two apache servers in a ProxyPass configuration, with the public
address being an IPv6 address of https://[fd66:4613:4146:1::82]/. The Django
web framework uses the HTTP_X_FORWARDED_HOST variable to determine the host to
use for redirection, and apache passes this
HTTP_X_FORWARDED_HOST = [fd66
It looks like some code is naively assuming ipv4 and stripping everything after
the colon. This is breaking http redirects from Django and anyone else relying
on that variable.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]