On Mon, Dec 12, 2016 at 12:17 PM, Jacob Champion <champio...@gmail.com>
wrote:

> On 12/12/2016 08:18 AM, Yann Ylavic wrote:
>
>> On Mon, Dec 12, 2016 at 3:32 PM, Eric Covener <cove...@gmail.com> wrote:
>>
>>> On Mon, Dec 12, 2016 at 6:25 AM, Yann Ylavic <ylavic....@gmail.com>
>>> wrote:
>>>
>>>> Tested with "Header set 'X-Bad' '<something with CR>'" with no redirect
>>>> loop.
>>>>
>>>
>>> w/ 'Header always set...' this still repeats
>>>
>>
>> Right, with r1773812 it looks good.
>>
>
> Even with r1773812, I'm still getting recursion with the `Header always
> set` case. ap_is_initial_req() is returning true during the ap_die()
> response.
>
> Can anyone else confirm?


I expect we still must have a header unset in the 500 case for all invalid
header names or values.

A simple test in Strict mode is

Foo?Bar: Bash

A simple test in non-strict mode is

FooBar: Bash\a

Reply via email to