[Bug] Multiline proxied response headers mangled

Maxim Dounin mdounin at mdounin.ru
Mon Apr 18 19:48:22 MSD 2011


Hello!

On Mon, Apr 18, 2011 at 04:33:01PM +0100, Laurence Rowe wrote:

> Hi,
> 
> I hope this is the right place to report bugs. Nginx seems to have a
> bug in handling multiline response headers. According to RFC 2616,
> "Header fields can be extended over multiple lines by preceding each
> extra line with at least one SP or HT."
> http://www.w3.org/Protocols/rfc2616/rfc2616-sec4.html (and also in
> HTTP 1.0 - http://www.apps.ietf.org/rfc/rfc1945.html#sec-4.2)

[...]

> Vary: X-Anonymous,
> 	Accept-Encoding

[...]

> Vary: X-Anonymous,
> 	Accept-Encoding:

[...]

> Where in the proxied response the second line of the Vary header has
> had an ":" appended, as if it were being interpreted as a malformed
> header in its own right.

Yes, it's known issue: nginx doesn't support header folding.  On 
the other hand, it's going to be deprecated in httpbis[1] anyway 
and therefore isn't considered to be high priority.

[1] http://tools.ietf.org/html/draft-ietf-httpbis-p1-messaging-13#section-3.2

Maxim Dounin



More information about the nginx-devel mailing list