[openstreetmap/openstreetmap-website] Follow-up #1400 (#1407)

Fri Jan 6 18:18:36 UTC 2017

It may be a coincidence but IIRC the binary value of the character "P"
is 80... I guess the intention was to add it to the header as an integer
instead of a char.

On 2017-01-06 18:55, mmd wrote:

> Apologies to create a new issue for this stuff, but #1400 [1] is locked unfortunately and I wanted just to add a two line comment. So here we go: 
> 
> I could reproduce the issue with Merkaartor 0.17.2 locally, the API URL as it is maintained in Merkaartor is perfectly ok, but somehow Merkaartor screwed up the "Host" part in the HTTP header by adding something like ":P" in the HTTP request. I guess this strict host check is somehow new or the user:wycbtma didn't use Merkaator for some time. 
> 
> I don't if you want to support such a crappy and old client, at least for the user who reported it (and somehow is unable to upgrade for whatever reason) can no longer use his version. 
> 
> See this HTTP trace I collected in wireshark:
> 
> GET /api/0.6/way/65190596/relations HTTP/1.1
> Host: www.openstreetmap.org:P
> User-Agent: Merkaartor/0.17 (X11;SVNREV)
> Authorization: Basic Og==
> content-length: 0
> 
> HTTP/1.1 301 Moved Permanently
> Date: Fri, 06 Jan 2017 17:39:15 GMT
> Server: Apache/2.4.18 (Ubuntu)
> Location: http://www.openstreetmap.org/api/0.6/way/65190596/relations
> Content-Length: 356
> Content-Type: text/html; charset=iso-8859-1
> 
> <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
> <html><head>
> <title>301 Moved Permanently</title>
> </head><body>
> <h1>Moved Permanently</h1>
> <p>The document has moved <a href="http://www.openstreetmap.org/api/0.6/way/65190596/relations">here</a>.</p>
> <hr>
> <address>Apache/2.4.18 (Ubuntu) Server at www.openstreetmap.org:p Port 80</address>
> </body></html>
> 
> --
> You are receiving this because you are subscribed to this thread.
> Reply to this email directly, view it on GitHub [2], or mute the thread [3].
> 
> _______________________________________________
> rails-dev mailing list
> rails-dev at openstreetmap.org
> https://lists.openstreetmap.org/listinfo/rails-dev

Links:
------
[1] https://github.com/openstreetmap/openstreetmap-website/issues/1400
[2] https://github.com/openstreetmap/openstreetmap-website/issues/1407
[3]
https://github.com/notifications/unsubscribe-auth/ABWnLRMBgqGjgRV9RJ8HXAdlVMFJ9-xRks5rPoAkgaJpZM4Lc8rz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20170106/284e26cd/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: blocked.gif
Type: image/gif
Size: 118 bytes
Desc: not available
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20170106/284e26cd/attachment.gif>