Helo,

when handling a RewriteRule with the [P] flag, mod_rewrite always call
fully_qualify_uri() on the rewritten URL before returning.

This does nothing if the URL is already absolute, otherwise this will
result in :

ap_http_scheme(r)://ap_get_server_name_for_url(r):ap_get_server_port(r)/<non-full-URL>

mod_proxy will then (likely) issue a request to itself (since the URL above
is the one requested by the client, modulo path change, to reach httpd),
leading to an infinite (network, resources exhausting) loop.

Wouldn't it be safer to return an error instead if the final URL is not
absolute?

Regards,
Yann.

Reply via email to