Re: [squid-users] Squid reject white-space character in HTTP header ?

On Sun, 26 Dec 2004, Henrik Nordstrom wrote:

>> Any idea to workaround and trick this request ? or it just some typos in
>> HTTP header ?
>
> Most likely a malfunctioning webserver returing invalid HTTP responses having
> whitespace in header names.

Confirmed. When sending your request the to web server in question
the server response reads

HTTP/1.1 200 OK
Date: Sun, 26 Dec 2004 21:33:35 GMT
Server: Apache/1.3.26 (Unix) PHP/4.3.1 mod_throttle/3.1.2 mod_become/1.2
X-Powered-By: PHP/4.3.1
P3P : CP="ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV
INT DEM CNT STA POL HEA PRE LOC OTC"
Set-Cookie: PHPSESSID=f7306bc04331447a704c12a8b01bc94f; path=/
Connection: close
Content-Type: text/html

As you can see the P3P header is malformed with a space before the :, and
very recent snapshot releases of Squid-2.5 detects this protocol violation
and rejects the response to ensure reliability in the HTTP protocol
processing.

Regards
Henrik
Received on Sun Dec 26 2004 - 14:43:20 MST