moonchen opened a new pull request, #13333:
URL: https://github.com/apache/trafficserver/pull/13333
The head/range/redirect auth transforms in the `authproxy` plugin copy the
whole client request and then force it bodyless (method override +
`Content-Length: 0`) to probe the auth server, but left `Transfer-Encoding`,
`Trailer`, and `Expect` in place. A chunked or `Expect: 100-continue` client
request therefore produced a self-contradictory sub-request: a bodyless
HEAD/GET still advertising a body.
ATS honors the framing and sets up a request-body tunnel for a body that
never
arrives, stalling the probe until the inactivity timeout; and
`proxy.config.http.reject_head_with_content` rejects a HEAD that declares
content outright. This strips `Transfer-Encoding`, `Trailer`, and `Expect`
when normalizing the sub-request to bodyless, in all three transforms
(head, range, redirect).
A small `HttpRemoveMimeHeader()` helper is added to `utils.{h,cc}` that
destroys every instance of a named field (these fields can be repeated across
multiple lines).
🤖 Generated with [Claude Code](https://claude.com/claude-code)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
