[EMAIL PROTECTED] wrote: >> *************** >> *** 969,974 **** >> --- 980,986 ---- >> */ >> int status = r->status; >> r->status = HTTP_OK; >> + ap_discard_request_body(rp); >> return status; >> } >> } else > >How does this part fit into the bugfix? (Doesn't seem related to the bug >to me, but then I haven't looked at it that closely, just wondering)
If we don't discard the request body that accompanied the 401 response, it is still there on the socket when auth succeeds... and is therefore prepended, in it's raw chunked glory, when the actual content page from the origin server is served to the client.
