Issues

Select view

Select search mode

 
50 of 70

Duplicate "Transfer-Encoding" header returned for some requests

Description

It appears that edge-inn-reach may be producing a duplicate “Transfer-Encoding” header in HTTP responses under some circumstances. Here are the headers for a response to the verifypatron request:

HTTP/1.1 200 cache-control: no-cache, no-store, max-age=0, must-revalidate connection: keep-alive date: Wed, 26 Mar 2025 18:47:44 GMT expires: 0 keep-alive: timeout=60 pragma: no-cache transfer-encoding: chunked vary: Access-Control-Request-Headers vary: Access-Control-Request-Method vary: Origin x-content-type-options: nosniff x-frame-options: DENY x-xss-protection: 0 Content-Type: application/json Transfer-Encoding: chunked

Note both transfer-encoding: chunked and Transfer-Encoding: chunked

This can cause issues for clients and upstream proxies that are more strict about header checking.

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

Don't proxy ingress for edge-inn-reach through nginx, or set up the proxy server to strip the duplicate headers.

Checklist

hide

Details

Assignee

Reporter

Labels

Priority

Development Team

Volaris

RCA Group

TBD

Affected releases

Quesnelia (R1 2024)

Affected Institution

University of Colorado

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created last month
Updated last month

Activity

Show:
Gurleen Kaur1
made 2 changes
last month
Assignee
Unassigned
Antony Hruschev
Labels
None
back-end
Wayne Schneider
created the Issuelast month
TestRail: Cases
TestRail: Runs

Flag notifications