[Zope-dev] [Zope2] Multiline response headers causing problems for proxies.

Tres Seaver tseaver at palladion.com
Mon Apr 18 14:36:53 EDT 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/18/2011 12:01 PM, Laurence Rowe wrote:
> When using response.appendHeader, Zope appends the new value following
> an ",\r\n\t" which splits the header over multiple lines. While this
> behaviour is standards compliant, it causes problems for both Varnish
> [1] and Nginx [2] which may then mangle the header value.
> 
> In fact the HTTP 1.0 spec notes that splitting over multiple lines in
> not recommended [3], though the HTTP 1.1 spec does not mention this
> explicitly, though it does say [4]:
>     "Applications ought to follow "common form", where one is known or
> indicated, when generating HTTP constructs, since there might exist
> some implementations that fail to accept anything"
> 
> Are there any objections to me applying the attached patch to Zope
> 2.13 and trunk?

+0.  We likely need to test that your patch doesn't break stuff on other
maybe-not-compliant servers (older Apache, IIS).


Tres.
- -- 
===================================================================
Tres Seaver          +1 540-429-0999          tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk2shMUACgkQ+gerLs4ltQ4oKgCg0/BXLTh3VvpBGeNgc+WFKx9V
UdEAnRp1lxbXDKFbrJ8nBwgWaRJ/B0y1
=xjg8
-----END PGP SIGNATURE-----



More information about the Zope-Dev mailing list