1495834 - xmlrpc.cgi outputs headers in request-body

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: API, defect)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

curl -v -d /dev/null https://bugzilla.mozilla.org/xmlrpc.cgi; echo
*   Trying 54.200.58.182...
* TCP_NODELAY set
* Connected to bugzilla.mozilla.org (54.200.58.182) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* ALPN/NPN, server did not agree to a protocol
* SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
* Server certificate:
*       subject: CN=*.bugzilla.mozilla.org,OU=WebOps,O=Mozilla Foundation,L=Mountain View,ST=California,C=US
*       start date: Feb 08 00:00:00 2018 GMT
*       expire date: May 02 12:00:00 2019 GMT
*       common name: *.bugzilla.mozilla.org
*       issuer: CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US
> POST /xmlrpc.cgi HTTP/1.1
> Host: bugzilla.mozilla.org
> User-Agent: curl/7.51.0
> Accept: */*
> Content-Length: 9
> Content-Type: application/x-www-form-urlencoded
> 
* upload completely sent off: 9 out of 9 bytes
< HTTP/1.1 200 OK
< Content-Type: text/html; charset=UTF-8
< Date: Tue, 02 Oct 2018 18:19:29 GMT
< Set-Cookie: Bugzilla_login_request_cookie=GsASKCXLLK; path=/; secure; HttpOnly; SameSite=Lax
< Set-Cookie: github_secret=FEtfjblRre4JKWIN0oT65Wb883jAXoztrIdZTnoBIo8FL7NRuSg0aKnnA4k0QHuI95sgRoJdFIlD281nHVueUEzl2Zg91Fxlyfll3UgYYCPOwbYj7dathfpKbFHYv8pXBYgLj0K19LrwWq8us8EaAV0R83WB9MgZtyktDdajceJeQBvM5rUk8hRcHeK3EuQ4RxOQLfehZbS28qPIIp6U57zeWy3HN3AeTw2cS34ZrjFeTzmolMkasFEZlNhh8khO; path=/; secure; HttpOnly; SameSite=Lax
< Strict-Transport-Security: max-age=31536000; includeSubDomains
< X-content-type-options: nosniff
< X-frame-options: SAMEORIGIN
< X-xss-protection: 1; mode=block
< transfer-encoding: chunked
< Connection: keep-alive
< 
Status: 200 OK
ETag: F4dkAY88SMYinJFfAMowCA
Content-Length: 409
Content-Type: text/xml
SOAPServer: SOAP::Lite/Perl/1.17

* Curl_http_done: called premature == 0
* Connection #0 to host bugzilla.mozilla.org left intact
<?xml version="1.0" encoding="UTF-8"?><methodResponse><fault><value><struct><member><name>faultString</name><value><string>Content-Type must be 'text/xml,' 'multipart/*,' 'application/soap+xml,' 'or 'application/dime' instead of 'application/x-www-form-urlencoded'</string></value></member><member><name>faultCode</name><value><string>Client</string></value></member></struct></value></fault></methodResponse>

Comment 1

[Dylan Hardison [:dylan] (he/him)]

Attachment: GitHub Pull Request