[EMAIL PROTECTED] wrote:
>> ***
>> *** 969,974
>> --- 980,986
>>*/
>> int status = r->status;
>> r->status = HTTP_OK;
>> + ap_discard_request_body(rp);
>> return status;
>> }
>> } else
>
>How does this part fit into the bugfix? (Doesn't seem related to the
bug
>to me, but then I haven't looked at it that closely, just wondering)
If we don't discard the request body that accompanied the 401 response,
it is still there on the socket when auth succeeds... and is therefore
prepended, in it's raw chunked glory, when the actual content page from
the origin server is served to the client.