Bug 59142

Summary: Nocanon option in ProxyPass is ignored for a long URL (with warning message displayed in the error log)
Product: Apache httpd-2 Reporter: Mahesh Palaniswamy <Mahesh.Palaniswamy>
Component: mod_proxyAssignee: Apache HTTPD Bugs Mailing List <bugs>
Status: NEW ---    
Severity: normal CC: Mahesh.Palaniswamy
Priority: P2    
Version: 2.5-HEAD   
Target Milestone: ---   
Hardware: PC   
OS: Linux   

Description Mahesh Palaniswamy 2016-03-08 07:28:56 UTC
For a long URL with %3b (URL encoded characters for semicolon) in the URL path, nocanon option in ProxyPass is ignored. (The URL is for a REST web services call). And, the following warning message is displayed in the error log:

[Tue Mar 08 06:02:22.125148 2016] [proxy:warn] [pid 7204:tid 47095902471936] [client aa.bb.cc.dd:12345] AH01136: Unescaped URL path matched ProxyPass; ignoring unsafe nocanon

Behaviour: This results in a truncated URL reaching the server with truncation happening at the location of semicolon.