Bug 1171947

Summary:	RFE: Squid - add '--enable-http-violations' configure option
Product:	Red Hat Enterprise Linux 6	Reporter:	Morgan Weetman <mweetman>
Component:	squid	Assignee:	Luboš Uhliarik <luhliari>
Status:	CLOSED ERRATA	QA Contact:	Ondřej Pták <optak>
Severity:	low	Docs Contact:	Christian Huffman <chuffman>
Priority:	medium
Version:	6.6	CC:	dkutalek, joallen, magoldma, mweetman, optak, psimerda, salmy, thozza
Target Milestone:	rc	Keywords:	FutureFeature
Target Release:	---
Hardware:	x86_64
OS:	Unspecified
Whiteboard:
Fixed In Version:	squid-3.1.23-4.el6	Doc Type:	Enhancement
Doc Text:	squid supports hiding or rewriting HTTP headers The squid packages are now built with the "--enable-http-violations" option and allow the user to hide or rewrite HTTP headers.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-07-22 06:26:42 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Morgan Weetman 2014-12-09 04:33:39 UTC

Description of problem:
Customer would like to remove specific headers from responses, this requires squid to be built with '--enable-http-violations'. There should be no impact by adding this option. 

Customer case ref: 01312859

Comment 10 Ondřej Pták 2015-04-15 10:13:32 UTC

testing: squid-3.1.23-5.el6

without http violations:
========================

GET / HTTP/1.1
User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.15.3 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
Host: localhost
Accept: */*
Via: 1.1 rhel-6 (squid/3.1.23)
X-Forwarded-For: 127.0.0.1
Cache-Control: max-age=259200
Connection: keep-alive

with http violations:
request_header_access Accept deny all
=====================================

GET / HTTP/1.1
User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.15.3 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
Host: localhost
Via: 1.1 rhel-6 (squid/3.1.23)
X-Forwarded-For: 127.0.0.1
Cache-Control: max-age=259200
Connection: keep-alive


There will be automated test later.

Comment 12 errata-xmlrpc 2015-07-22 06:26:42 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-1314.html