Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Transform headers policy should be case insensitive #9378

Closed
exalate-issue-sync bot opened this issue Nov 13, 2023 · 1 comment
Closed

Transform headers policy should be case insensitive #9378

exalate-issue-sync bot opened this issue Nov 13, 2023 · 1 comment

Comments

@exalate-issue-sync
Copy link

exalate-issue-sync bot commented Nov 13, 2023

Describe the bug :

When using transform headers policy the value of the headers should be case-insensitive according to this RFC standard https://www.w3.org/Protocols/rfc2616/rfc2616-sec4.html#sec4.2.

To Reproduce :

Steps to reproduce the behaviour:

  1. Create a simple API
  2. Add transform headers policy
  3. Whitelist a header for example 'TEST'
  4. Now go to debug mode and if you add the header TEST it will keep it
  5. Now instead of 'TEST' add 'test' and you will see that it will remove that meaning it is case-sensitive

Expected behaviour :

If I enter TEST or test or any other value that is basically test, it should not remove them.

Current behaviour :

Currently if I whitelist TEST it will only accept TEST with uppercase and if I enter test with lowercase it will regard it as a different header and remove it. So customers must whitelist the same headers with uppercase, lowercase or even different formats.

Desktop :

  • Environment: 4.1.2
  • Browser: Google Chrome

Attachments

image1.png

image2.png

image3.png

@exalate-issue-sync exalate-issue-sync bot changed the title [APIM] - gravitee-policy-transformheaders - should be case insensitive Transform headers policy should be case insensitive Nov 14, 2023
Copy link
Author

This issue will be fixed in versions 4.0.13, 3.20.24, 4.2.0, 4.1.4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

0 participants