[JIRA] (JENKINS-36993) Cookie header too long, causing a 413 HTTP error

[sorin.sbar...@gmail.com (JIRA)]

Title: Message Title

Sorin Sbarnea created an issue   Jenkins / JENKINS-36993 Cookie header too long, causing a 413 HTTP error Issue Type: Bug Assignee: Unassigned Components: core Created: 2016/Jul/27 2:02 PM Priority: Critical Reporter: Sorin Sbarnea It seems that Jenkins ends-up using a perverse number and size of cookies which do exceed server size limitations. If cookies are under 8K we are a safe but once you excees this number you start getting failed HTTP requests: Cookie header too long, causing a 413 HTTP error It seems that the problem happens more often in dasboard plugin pages but Request Cookies 7828 JSESSIONID.06076fcc 2u4gi9zl7dwp14iar2a1o0qag N/A N/A N/A 47 JSESSIONID.08a6f8d4 18dtnwfvs9jjnbvw9egdr5htr N/A N/A N/A 47 JSESSIONID.0a44c6cc tmcodqnckndz7cp6ccprippi N/A N/A N/A 46 JSESSIONID.0d10d460 1cypmk06mo4es142gpc2qyyts2 N/A N/A N/A 48 JSESSIONID.19530d7b 52s89da9b0qy15lc3ayyu98m1 N/A N/A N/A 47 JSESSIONID.274f8623 1pwmnhvtomwh26u42wdxa79q3 N/A N/A N/A 47 JSESSIONID.2b3b951a 1sc5pl8s8wvyc1rbxz8yoycbin N/A N/A N/A 48 JSESSIONID.36e4f3d2 17qd4agutapkv15n8lkwcunk2r N/A N/A N/A 48 JSESSIONID.37185837 1qgvitss0hj31rsjwfg9ehc6b N/A N/A N/A 47 JSESSIONID.3cb3b18f 1d0rmwk1qfcs51n5d61qocbg6s N/A N/A N/A 48 JSESSIONID.3e6a110c 63s46d0gft5u11asdx1kzyywn N/A N/A N/A 47 JSESSIONID.4275fe69 iltdedkjjtmt150zuc57tck81 N/A N/A N/A 47 JSESSIONID.43446e0f hgina9tuaowj150h90n0vz6hq N/A N/A N/A 47 JSESSIONID.43859f69 olslwnaacmm91couxqb8huaht N/A N/A N/A 47 JSESSIONID.48b678d5 ymppkv4wdrt4s0z4tgq4grzc N/A N/A N/A 46 JSESSIONID.4a12d5c8 nlye7y9xt9ej15gpmu6awuz9l N/A N/A N/A 47 JSESSIONID.4fea4d8d exhi6xh14y8i1hh304tskep1v N/A N/A N/A 47 JSESSIONID.51725cd5 1smholmd89jplye5sei4l875e N/A N/A N/A 47 JSESSIONID.548ec75e 1jzigt3eis3h71eho4k8rdaza8 N/A N/A N/A 48 JSESSIONID.5aa178e0 1dxtz2anfhxfs1frvw1ktfggr7 N/A N/A N/A 48 JSESSIONID.6592fe8d eew3gkyj1l8o9cif5o8ln8u3 N/A N/A N/A 46 JSESSIONID.73adce39 1vt6mllmhd56n1l4dc0grtsi7y N/A N/A N/A 48 JSESSIONID.74bd2137 kdkxy4822ddq13s48cmjjw3xi N/A N/A N/A 47 JSESSIONID.7a9b89d9 vmeh4th6gc8m6n9tmi5erbbb N/A N/A N/A 46 JSESSIONID.7c7db147 165vrj6ue6fji17g9btx7o8j1x N/A N/A N/A 48 JSESSIONID.7c917e83 1fkjcyu9c9vx91rd3vair7s8ny N/A N/A N/A 48 JSESSIONID.8331a6ad 2abr2k4abik46f60yj1kfpha N/A N/A N/A 46 JSESSIONID.835c2805 1qetm2u5bjl691jxmji5lznr2k N/A N/A N/A 48 JSESSIONID.8a34e81a v4sb96i1j0q9sws448d4ytte N/A N/A N/A 46 JSESSIONID.97b7d361 1g0iodxktbvgvo8mxpb4kpq9z N/A N/A N/A 47 JSESSIONID.9bd120c0 1myvzhz8a24561w4lefscmszro N/A N/A N/A 48 JSESSIONID.a5766248 18mztnf7xh9ztwn4r2d7kt3x8 N/A N/A N/A 47 JSESSIONID.aa5ddcf7 qeb09ucmu3i91kgw5w5eaidy1 N/A N/A N/A 47 JSESSIONID.abcdc9af 1xi98hmjvlfl21uiwi4oqq339c N/A N/A N/A 48 JSESSIONID.ad3467b6 1jw5p1vfrj6kxkal5usx8j11a N/A N/A N/A 47 JSESSIONID.ad929966 7njjdod9e75z1i85f2dijjfdg N/A N/A N/A 47 JSESSIONID.b02df523 1l866ji69hfbk1xjnseeteatmv N/A N/A N/A 48 JSESSIONID.b2125fe1 eurlzpaxkl01te7hw4c1kguc N/A N/A N/A 46 JSESSIONID.b493f38d 1pmy4hjoe62f3gv2sa0s4drs8 N/A N/A N/A 47 JSESSIONID.b8222741 1lzsi92ylv2q54ux1onb6htmc N/A N/A N/A 47 JSESSIONID.b94a4108 101uzs0uumvwr5zs9hnt8qout N/A N/A N/A 47 JSESSIONID.bf2a1950 12fc6bmc4zwoe9s7cg8g2a8ka N/A N/A N/A 47 JSESSIONID.c1d951f6 vjxkr5wb11wpkl9kaw47foyv N/A N/A N/A 46 JSESSIONID.c546f421 18duy61o6awha1fc8j0nzbsvo6 N/A N/A N/A 48 JSESSIONID.cb7b7391 xxcrjyrwunai19hr806t8zifw N/A N/A N/A 47 JSESSIONID.d53c33c2 14lirw696c1s5tcunpb40n6y N/A N/A N/A 46 JSESSIONID.d9f878ff 8uaxfijgwned11hfy7lns9to7 N/A N/A N/A 47 JSESSIONID.da31873c rm6l5kcn9het1amq7bpyfgyg N/A N/A N/A 46 JSESSIONID.decb54f7 1gy2r6skk6yqtku4qsapzq2f N/A N/A N/A 46 JSESSIONID.e01a131f 1nrnbjshs8lm1h31vk439yy55 N/A N/A N/A 47 JSESSIONID.e4f17e93 1u75dlcsltmg4abi7ybmvpxo N/A N/A N/A 46 JSESSIONID.e6d62961 ruuqg2lvl0sgjd2tve60k0gd N/A N/A N/A 46 JSESSIONID.e99f4868 zgqfv6pgy89t155titgqfvz7m N/A N/A N/A 47 JSESSIONID.ebfb0a79 jr6aen046tk8zrwyhl0mf4b6 N/A N/A N/A 46 JSESSIONID.edc46d3f 9vcg7ybhw6iesgywahjck26d N/A N/A N/A 46 JSESSIONID.ef5fd82f htq9o2tx6dzw5bqsf370316o N/A N/A N/A 46 JSESSIONID.f051bae8 154kn5c7pai9b1j9mxwbzcsngt N/A N/A N/A 48 JSESSIONID.f1fe6e0e 1flftn4n3h8pwwav64ypou5y9 N/A N/A N/A 47 JSESSIONID.f2c4415f 1kfk5idveo3n11w54sh9in2s3b N/A N/A N/A 48 JSESSIONID.fd1a0810 cr50ogrtsvfrdb94i2ctohk0 N/A N/A N/A 46 _.adminAddress 01100001 01100100 01100100 01110010 01100101 01110011 01110011 00100000 01101110 01101111 01110100 00100000 01100011 01101111 01101110 01100110 01101001 01100111 01110101 01110010 01100101 01100100 00100000 01111001 01100101 01110100 00100000 00111100 01101110 01101111 01100010 01101111 01100100 01111001 01000000 01101110 01101111 01110111 01101000 01100101 01110010 01100101 00111110 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 448 _.ami 01100001 01101101 01101001 00101101 00110000 00110101 00110101 01100110 01100100 00110010 00110001 00110010 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 160 _.apiKey 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 55 _.blacklist N/A N/A N/A 14 _.buildForkPRHead N/A N/A N/A 20 _.buildForkPRMerge N/A N/A N/A 21 _.buildOriginBranchWithPR N/A N/A N/A 28 _.buildOriginPRHead N/A N/A N/A 22 _.buildOriginPRMerge N/A N/A N/A 23 _.credentialsId 01100101 00111000 00110000 00110010 00110110 00111000 00110001 00110101 00101101 01100010 01100101 01100110 00110110 00101101 00110100 00110111 01100001 00110111 00101101 01100010 00111001 00110110 01100100 00101101 01100011 00110011 01100011 00110101 01100100 01100110 01100011 00110000 00111001 00110010 00110111 00110000 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 386 _.daysToKeepStr 00110011 00110000 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 80 _.defaultSuffix 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 62 _.description 01110101 01100010 01110101 01101110 01110100 01110101 00101101 00110001 00110101 00101110 00110001 00110000 00101101 01101000 01110110 01101101 00111010 01100101 01100010 01110011 00101101 01110011 01110011 01100100 00111010 01110101 01110011 00101101 01100101 01100001 01110011 01110100 00101101 00110001 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 366 _.displayNameOrNull 01000010 01001101 01001100 01001100 00100000 01010100 01100101 01100011 01101000 01101110 01101111 01101100 01101111 01100111 01101001 01100101 01110011 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 219 _.githubAuth N/A N/A N/A 15 _.hostname 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 57 _.includes 00101010 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 66 _.interval 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 57 _.jobName 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 56 _.labelString 01110000 01101111 01110011 01110100 01100111 01110010 01100101 01110011 00100000 01100100 01101111 01100011 01101011 01100101 01110010 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 195 _.name 01100010 01101101 01101100 01101100 01110100 01100101 01100011 01101000 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 125 _.namePattern 01011011 01011100 01100100 01011100 01110111 01011100 00101101 01011101 00101010 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 141 _.numToKeepStr 00110101 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 70 _.privateKey N/A N/A N/A 15 _.process 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 56 _.pruneDeadBranches N/A N/A N/A 22 _.recurse N/A N/A N/A 12 _.repo 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 53 _.scanCredentialsId 00110101 01100100 01100110 01100101 01100001 00110010 00110001 00110111 00101101 00110100 01100001 01100011 00110001 00101101 00110100 01100011 01100010 01100110 00101101 00111000 01100011 01100010 01100001 00101101 01100001 00110111 00110111 00110001 01100101 01100011 00111001 00110100 00110111 00110011 00110110 00110011 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 390 _.smtpServer 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 59 _.useProjectNamingStrategy N/A N/A N/A 29 __lc.visitor_id.6961731 S1460032002.931379b1d8 N/A N/A N/A 48 __utma 249109909.1736470707.1456393331.1461616000.1469533324.2 N/A N/A N/A 64 __utmc 249109909 N/A N/A N/A 18 __utmz 249109909.1461616000.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none) N/A N/A N/A 79 __zlcmid aDfU8T2VEFrhFs N/A N/A N/A 25 _ga GA1.2.1736470707.1456393331 N/A N/A N/A 33 _hp2_id.1049193719 5310556234248418.1379313959782150.4637477093003074 N/A N/A N/A 71 authToken 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 56 autoinvite_callback true N/A N/A N/A 26 com-cloudbees-hudson-plugins-folder-computed-PeriodicFolderTrigger N/A N/A N/A 69 env.key 01000001 01010111 01010011 01011111 01000001 01000011 01000011 01000101 01010011 01010011 01011111 01001011 01000101 01011001 01011111 01001001 01000100 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 207 env.value 01000001 01001011 01001001 01000001 01001001 01001111 00110111 01001000 01010011 01011000 00110111 00110010 01011001 01001000 01010000 01010000 01001000 01000001 00110110 01010001 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 236 globalUpstreamFilterStrategy N/A N/A N/A 31 hudson-plugins-promoted_builds-PromotionTrigger N/A N/A N/A 50 hudson-slaves-EnvironmentVariablesNodeProperty N/A N/A N/A 49 hudson-triggers-TimerTrigger N/A N/A N/A 31 includeRegex 00101110 00101010 00101000 01100100 01100101 01110110 01100101 01101100 01101111 01110000 01111100 01101101 01100001 01110011 01110100 01100101 01110010 00101001 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 221 jenkins-timestamper elapsed N/A N/A N/A 29 jenkins-timestamper-local false N/A N/A N/A 33 jenkins-timestamper-offset -3600000 N/A N/A N/A 37 lc_window_state minimized N/A N/A N/A 27 name 01100110 01100001 01101100 01110011 01100101 N/A N/A N/A 51 primaryView N/A N/A N/A 14 primaryView N/A N/A N/A 14 pseudoRemoteTrigger N/A N/A N/A 22 screenResolution 1280x800 N/A N/A N/A 27 screenResolution 1280x800 N/A N/A N/A 25 screenResolution 1280x800 N/A N/A N/A 27 toggle unchecked N/A N/A N/A 18 type N/A N/A N/A 7 undefined N/A N/A N/A 12 undefined N/A N/A N/A 12 useincluderegex N/A N/A N/A 18 Response Cookies 0 Name z-dashboard/ z-dashboard/ Here is the result of a grep on 413 HTTP responses: - - [27/Jul/2016:08:30:39 +0000] "POST /job/bmlltech/computation/logText/progressiveHtml HTTP/2.0" 200 413 "https://ci.example.com/job/example/computation/console" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47 - - [27/Jul/2016:12:40:45 +0000] "POST /job/example/view/z-dashboard/ajaxBuildQueue HTTP/2.0" 413 52 "https://ci.example.com/job/example/view/z-dashboard/configure" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11 - - [27/Jul/2016:12:40:45 +0000] "POST /job/example/view/z-dashboard/ajaxExecutors HTTP/2.0" 413 52 "https://ci.example.com/job/example/view/z-dashboard/configure" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_ - - [27/Jul/2016:12:40:51 +0000] "POST /job/example/view/z-dashboard/configSubmit HTTP/2.0" 413 52 "https://ci.example.com/job/example/view/z-dashboard/configure" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5 - - [27/Jul/2016:12:40:55 +0000] "GET /job/example/view/z-dashboard/configSubmit HTTP/2.0" 413 52 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 - - [27/Jul/2016:12:40:58 +0000] "GET /job/example/view/z-dashboard/ HTTP/2.0" 413 52 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537. - - [27/Jul/2016:12:49:26 +0000] "GET /job/example/view/z-dashboard/ HTTP/2.0" 413 52 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537. - - [27/Jul/2016:12:49:38 +0000] "GET /job/example/view/z-dashboard/ HTTP/2.0" 413 52 "https://ci.example.com/job/example/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko - - [27/Jul/2016:12:49:52 +0000] "GET /job/example/view/z-dashboard/ HTTP/2.0" 413 52 "https://ci.example.com/job/example/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko - - [27/Jul/2016:12:50:07 +0000] "GET /job/example/view/z-dashboard/ HTTP/2.0" 413 52 "https://ci.example.com/job/example/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko - - [27/Jul/2016:12:50:14 +0000] "GET /job/example/view/z-dashboard/ HTTP/2.0" 413 52 "https://ci.example.com/job/example/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko - - [27/Jul/2016:12:50:21 +0000] "GET /job/example/view/z-dashboard/ HTTP/2.0" 413 52 "https://ci.example.com/job/example/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko - - [27/Jul/2016:13:44:59 +0000] "GET /job/integration-tests/221//artifact/dist/screenshot-01.png HTTP/2.0" 404 413 "https://ci.example.com/job/integration-tests/221/console" "Mozilla/5.0 (X11; Ubuntu; Linux x8 Add Comment   This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.