Actions
Bug #2080
closed
display_error_form in /etc/inc/authgui.inc does not set a HTTP status code
Status:
Closed
Priority:
Low
Assignee:
-
Category:
Web Interface
Target version:
-
Start date:
01/11/2012
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.0.1
Affected Architecture:
All
Description
When displaying an error page, the web UI doesn't set a HTTP status code on its response.
It puts it in the HTML title, but this wasn't enough to prevent our CDN caching the pfSense DNS rebinding error page (served with "200 OK" status) for our website when a node came up without haproxy and with the web UI listening on port 80 instead.
We've since moved the UI to an alternative port as a workaround to prevent this happening in future.
Updated by Chris Buechler almost 14 years ago
- Status changed from New to Feedback
what do you think it should set? 200 is correct unless there is an error at the HTTP level, which is not what happened there.
Updated by Chris Buechler over 13 years ago
- Status changed from Feedback to Closed
Actions