https://bz.apache.org/bugzilla/show_bug.cgi?id=63437

            Bug ID: 63437
           Summary: MergeSlashes option breaks protocol specifier in URIs
           Product: Apache httpd-2
           Version: 2.4.39
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

Hello together,

we use mod_proxy as a forward proxy for outgoing web traffic. Version 2.4.39
introduced the new MergeSlashes option which defaults to ON.

This breaks the protocol specifier of URIs, especially in the data structure
apfilter_t->r->uri as used by mod_proxy.

Here's a logged URI with MergeSlashes ON:

http:/2016.eicar.org/download/eicar.com

-> the second slash in the URI after "http:/" got eaten.

Turning MergeSlashes OFF fixes the issue. I guess this is an unwanted side
effect of the new feature :)

Best regards,
Thomas Jarosch

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to