[
https://issues.apache.org/jira/browse/TS-4133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15193534#comment-15193534
]
ASF GitHub Bot commented on TS-4133:
------------------------------------
Github user jrushf1239k commented on the pull request:
https://github.com/apache/trafficserver/pull/424#issuecomment-196387624
Updated the README and added source code comments on the requirement that
signing query parameters must always be appended to the end of any application
query parameters in the request. Added a check that limits the length of query
parameters to no more than MAX_QUERY_LEN or 4096 bytes. This length should be
sufficient.
> Update url_sig plugin to pass application query parameters
> ----------------------------------------------------------
>
> Key: TS-4133
> URL: https://issues.apache.org/jira/browse/TS-4133
> Project: Traffic Server
> Issue Type: Improvement
> Components: Plugins
> Reporter: John Rushford
> Assignee: John Rushford
> Fix For: 6.2.0
>
>
> Currently the url_sig plugin assumes that request urls have no other query
> parameters but url signing related parameters. After signing validation is
> performed using the signing parameters all query parameters are stripped from
> the request.
> This change will allow application query parameters that must be sent to the
> origin to fulfill a request to be left intact in the request. When signing a
> request with application query parameters it is required that the url signing
> parameters used by this plugin must come after the application parameters.
> When the request comes in the plugin will truncate the url signing parameters
> after verification leaving the application parameters intact.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
