IBM Support

PI99685: HTTPPROTOCOLOPTIONS=UNSAFE SHOULD ALLOW A SPACE IN A HEADER

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When running an application with a space in http header an error
    occurs because HTTP server asks for strict respect of the HTTP
    protocol, e.g. no spaces. Setting HTTPProtocolOptions=unsafe
    should allow spaces in the header, but does not.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  Users of IBM HTTP Server with the           *
    *                  HTTPProtocolOptions directive               *
    ****************************************************************
    * PROBLEM DESCRIPTION: A space is not allowed in a header      *
    ****************************************************************
    * RECOMMENDATION:  Apply this fix if using IBM HTTP Server     *
    *                  with the HTTPProtocolOptions directive      *
    ****************************************************************
    Trailing whitespace was not tolerated in headers.
    

Problem conclusion

  • HTTPProtocolOptions was updated to tolerate headers with
    trailing whitespace. The setting can be enabled and disabled
    via the HTTPProtocolOptions options 'AllowHeaderWhitespace'
    and 'DenyHeaderWhitespace', respectively.
    
    This fix is targeted for IBM HTTP Server fix packs:
    - 8.5.5.15
    - 9.0.0.9
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI99685

  • Reported component name

    WAS IHS ZOS

  • Reported component ID

    5655I3510

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-06-28

  • Closed date

    2018-09-14

  • Last modified date

    2018-09-14

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WAS IHS ZOS

  • Fixed component ID

    5655I3510

Applicable component levels

  • R850 PSY

       UP

  • R90P PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
27 April 2022