https://bz.apache.org/bugzilla/show_bug.cgi?id=69466
--- Comment #2 from Mark Thomas <ma...@apache.org> --- For info, I am working on a better fix for this at the moment. We have an extensive set of tests (about 18,000) for this that cover all sorts of edge cases. The approach I am trying to implement is: - don't remove any user set headers from a HEAD - any header (excluding Date) present in HEAD must be the same for GET - content related headers referenced in RFC 9110, section 9.3.2 that are present in GET but not the equivalent HEAD are allowed -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org