Package: nginx
Version: 1.4.1-3ubuntu1.1
Severity: normal
Tags: patch

Dear Maintainer,

the proxy_params config shipped within the nginx package contains the following 
line:

    proxy_set_header Host $host;

This will remove any provided port information from the header, and may result 
in the application to misbehave.
(e.g. http://stackoverflow.com/questions/3391986/http-post-drops-port-in-url).

This should be changed to include the port:

    proxy_set_header Host $host:$server_port;

Or just pass along the original header:

    proxy_set_header Host $http_host;

See http://wiki.nginx.org/HttpCoreModule#.24host for a description about how 
$host differs from $http_host.

I would prefer using $http_host. This is what arrived at nginx, and will not 
contain a default port (example.com:80).


-- System Information:
Debian Release: wheezy/sid
  APT prefers saucy-updates
  APT policy: (500, 'saucy-updates'), (500, 'saucy-security'), (500, 'saucy'), 
(150, 'testing'), (100, 'saucy-backports'), (50, 'trusty'), (50, 
'experimental'), (50, 'unstable'), (50, 'stable'), (50, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.11.0-14-generic (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages nginx depends on:
ii  nginx-full  1.4.1-3ubuntu1.1

nginx recommends no packages.

nginx suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to