https://bz.apache.org/bugzilla/show_bug.cgi?id=69466

--- Comment #2 from Mark Thomas <ma...@apache.org> ---
For info, I am working on a better fix for this at the moment. We have an
extensive set of tests (about 18,000) for this that cover all sorts of edge
cases.

The approach I am trying to implement is:
- don't remove any user set headers from a HEAD
- any header (excluding Date) present in HEAD must be the same for GET
- content related headers referenced in RFC 9110, section 9.3.2 that are
  present in GET but not the equivalent HEAD are allowed

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to