DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=39402>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=39402

           Summary: enabling gzip negotiation overwrites existing "vary:"
                    headers
           Product: Tomcat 5
           Version: 5.5.0
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connector:HTTP
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: [EMAIL PROTECTED]


If you have a site that uses "vary:" headers such as "vary: cookie" to
distinguish between the cacheability of pages for cookied and non-cookied users
this header will get overwritten if you enable gzip negotiation in tomcats
server.xml config.

If gzip negotiation is enabled it should modify the vary header *not* overwrite 
it.

This is quite bad as enabling gzip in the config can currently cause incorrect
files to get cached in browsers/proxies. By the time a developer realises that
the gzip functionality is broken in this way, various caches will hold the wrong
content possibly for long periods of time even once gzip is turned off again.

I suggest putting a warning in the server.xml against using gzip negotiation if
you are already using vary headers until this bug gets fixed.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to