https://issues.apache.org/bugzilla/show_bug.cgi?id=39396





--- Comment #4 from Aleksander Adamowski <[EMAIL PROTECTED]>  2008-03-20 
10:28:11 PST ---
Julian Reschke wrote:

>The Allow header should contain those methods for which the server would not
>return 405 (Not Allowed).
>
>Thus, if it returns 403 for DELETE, it's totally correct to include DELETE in
>the Allow header.

Actually it returns 405 for TRACE method:


$ telnet example.com 8080
OPTIONS /directory/ HTTP/1.0

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Allow: GET, HEAD, POST, TRACE, OPTIONS
Content-Type: text/html
Content-Length: 0
Date: Thu, 20 Mar 2008 17:19:57 GMT
Connection: close

$ telnet example.com 8080
TRACE /directory/ HTTP/1.0
X-Test-Header: blahblah

HTTP/1.1 405 TRACE method is not allowed
Server: Apache-Coyote/1.1
Allow: OPTIONS
Content-Length: 0
Date: Thu, 20 Mar 2008 17:20:18 GMT
Connection: close

_This_ behaviour is inconsistent IMO. Correct me if I'm wrong.

=======

Filip Hanik wrote
> IF you want HTTP/1.1 shouldn't you create a valid HTTP/1.1 request?

What do you mean? I don't see any deviations from RFC 2616 in my second
HTTP/1.1 request (although the RFC is quite unspecific on OPTIONS method).


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to