Toggle Current Issue
ID: 1360 Reporter: barrys
Status:
New New
 Resolution:
unresolved
Category: Orion/Web/Deployment Reported Version: 2.0.6
Last seen Version: 2.0.6 Fixed Version:
Platform: Unspecified/All OS: Linux
Java version: 1.4 Severity: major
Visibility: Public Public
Summary: Orion fails to strip leading spaces in HTTP header. Can stop virtual hosting from working.
Description: Some clients seem to be sending the Host: HTTP header with a leading space (well, actually two as one is specified by the HTTP specs). According to the HTTP specifications leading spaces are not part of the field but the Orion web server is failing to strip them. Some people are therefore unable to view Orion hosted virtual websites.

This meand that, if orion is trying to match the host name sent in the header to a virtual host then the match fails where the client sends the extra space.

e.g. Some clients send "Host: www.host.com" instead of "Host: www.host.com" (note extra space) and Orion cannot match " www.host.com" to the virtual host "www.host.com".

The same problem seems to occur with other HTTP header fields, but this doesn't seem to cause such major problems.


Collapse Public barrys 20061108 01:19:42
Modification: Issue created