Zend Framework

Missing header trigger mod_security

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: 1.5.1
  • Fix Version/s: 1.5.3
  • Component/s: Zend_XmlRpc_Client
  • Labels:
    None
  • Fix Version Priority:
    Must Have

Description

With default mod_security 2.5 Core Rules this happens: modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"]

The problem is a missing Accept header. I solved the problem by adding 'Accept: text/xml' to Zend/XmlRpc/Client.php on line 226.

$http->setHeaders(array(
            'Content-Type: text/xml; charset=utf-8',
            'User-Agent: Zend_XmlRpc_Client',
            'Accept: text/xml'
        ));

Activity

Hide
Matthew Weier O'Phinney added a comment -

Scheduling for next mini release

Show
Matthew Weier O'Phinney added a comment - Scheduling for next mini release
Hide
Matthew Weier O'Phinney added a comment -

Header added in trunk and 1.5 and 1.6 release branches.

Show
Matthew Weier O'Phinney added a comment - Header added in trunk and 1.5 and 1.6 release branches.

People

Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved:

Time Tracking

Estimated:
15m
Original Estimate - 15 minutes
Remaining:
15m
Remaining Estimate - 15 minutes
Logged:
Not Specified
Time Spent - Not Specified