https://bz.apache.org/bugzilla/show_bug.cgi?id=70289
--- Comment #1 from abernal <[email protected]> --- PR against 2.4.x: https://github.com/apache/httpd/pull/909 Confirmed the root cause: the cacheability check in mod_cache.c only read r->headers_out for Vary, so Vary: * set via "Header always" (which lands in r->err_headers_out) was missed, even though storage itself merges err_headers_out in. Reproduced end to end against a real build (disk cache + proxy + headers): a per-cookie response marked public/max-age gets cached and served to a different client with no cookie. Fix checks err_headers_out too, same as this function already does for Expires/Last-Modified/Etag/Cache-Control/Pragma. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
