Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenResty version exposed when request URL is to large #1552

Closed
jmdacruz opened this issue Aug 25, 2016 · 1 comment
Closed

OpenResty version exposed when request URL is to large #1552

jmdacruz opened this issue Aug 25, 2016 · 1 comment
Labels
task/feature Requests for new features in Kong

Comments

@jmdacruz
Copy link

jmdacruz commented Aug 25, 2016

Summary

When sending an invalid request with a URL that is too long, nginx/OpenResty returns a 414 error code which is not handled by Kong's error handler (which is only configured to handle 50x errors). The expectation is that Kong's error handler also captures this, instead of exposing information about OpenResty and it's version. The information is not only provided in the HTML body, but also on the Server header (which typically has Kong's version number instead)

Steps To Reproduce

  1. Call an API with a URL that is too long, e.g., http://{KONG_HOST}:{KONG_PORT}/{REPEAT SAME CHARACTER AT LEAST 10k TIMES}

Additional Details & Logs

  • Kong version (0.8.3)
  • Kong configuration (Default configuration file, regardless on what APIs are configured if any)
  • Ubuntu 14.04
@thibaultcha
Copy link
Member

Taken care of in 0.9.1, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
task/feature Requests for new features in Kong
Projects
None yet
Development

No branches or pull requests

2 participants