Bug 59142 - Nocanon option in ProxyPass is ignored for a long URL (with warning message displayed in the error log)
Summary: Nocanon option in ProxyPass is ignored for a long URL (with warning message d...
Status: NEW
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_proxy (show other bugs)
Version: 2.5-HEAD
Hardware: PC Linux
: P2 normal (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-03-08 07:28 UTC by Mahesh Palaniswamy
Modified: 2016-03-14 04:27 UTC (History)
1 user (show)



Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mahesh Palaniswamy 2016-03-08 07:28:56 UTC
For a long URL with %3b (URL encoded characters for semicolon) in the URL path, nocanon option in ProxyPass is ignored. (The URL is for a REST web services call). And, the following warning message is displayed in the error log:

[Tue Mar 08 06:02:22.125148 2016] [proxy:warn] [pid 7204:tid 47095902471936] [client aa.bb.cc.dd:12345] AH01136: Unescaped URL path matched ProxyPass; ignoring unsafe nocanon

Behaviour: This results in a truncated URL reaching the server with truncation happening at the location of semicolon.