notfound 733016 1.4.1-3ubuntu1.1
tags 733016 + pending
thanks

Hello Daniel,

On Tue, Dec 24, 2013 at 12:35:06AM +0100, Daniel Hahler wrote:
Package: nginx
Version: 1.4.1-3ubuntu1.1
Severity: normal
Tags: patch

Dear Maintainer,

the proxy_params config shipped within the nginx package contains the following 
line:

   proxy_set_header Host $host;

This will remove any provided port information from the header, and may result 
in the application to misbehave.
(e.g. http://stackoverflow.com/questions/3391986/http-post-drops-port-in-url).

This should be changed to include the port:

   proxy_set_header Host $host:$server_port;

Or just pass along the original header:

   proxy_set_header Host $http_host;

See http://wiki.nginx.org/HttpCoreModule#.24host for a description about how 
$host differs from $http_host.

I would prefer using $http_host. This is what arrived at nginx, and will not 
contain a default port (example.com:80).



Using http_host makes more sense indeed. We switched to $http_host, the
change will by included in the next upload to debian sid. I am not sure
how ubuntu will handle this, you should open a ticket in launchpad with
a reference to this bug as Thomas said.

FYI we have also added the X-Forwarded-Proto header to pass the original
protocol.

Thank you for the bug report,
Chris


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to