https://bz.apache.org/bugzilla/show_bug.cgi?id=66512

--- Comment #7 from Alexander Schüßler <alexander.schuess...@plunet.com> ---
Hey Mark,

I am not 100% sure what you want me to do but I guess you would like me to
track a click on a file(i.e. a download link)in the file manager on a system
where it works and not works each and show output in browser debug tools right?

There are huge differences.
In a working system we have this:

#----------------------------------------------------------
HTTP/2 200 OK
strict-transport-security: max-age=0
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval'
'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self'
'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com;font-src
'self' 'unsafe-inline' https://fonts.googleapis.com
https://fonts.gstatic.com;frame-ancestors 'self'; form-action 'self'
referrer-policy: strict-origin-when-cross-origin, no-referrer-when-downgrade
feature-policy: autoplay 'none'; camera 'none'; encrypted-media 'none';
fullscreen 'none'; geolocation 'none'; microphone 'none'; midi 'none'; payment
'none';
cache-control: private, must-revalidate
pragma: private, must-revalidate
content-disposition: inline; filename="5_???? EL.pdf";
filename*=UTF-8''5_%CE%A0%CE%A1%CE%9F%CE%A3%20EL.pdf
content-length: 53923
vary: User-Agent
content-type: application/pdf
date: Mon, 06 Mar 2023 16:25:51 GMT
server: Apache
X-Firefox-Spdy: h2
#----------------------------------------------------------


In a non working system it seems nothing goes really through:
#----------------------------------------------------------
HTTP/2 200 OK
content-length: 0
content-type: application/pdf
date: Mon, 06 Mar 2023 16:25:00 GMT
server: None
X-Firefox-Spdy: h2
#----------------------------------------------------------

I did both tests with Mozilla Firefox and extracted the information from the
networking tab by clicking on the triggered GET request. Is it that what you
need? Else please guide me a little bit more.

It is also not an issue for us to give you access to a test system on our side
(at least from the web perspective). If it needs to be something that grants
you server-side access via remote desktop or so I had to check this with my
team if we can provide such things.

Thanks!

Cheers!

Alex

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to