Apache Httpd < 2.2.29: HTTP Trailers processing bypass

2013-09-06T00:00:00
ID HTTPD:A524D631D92D34A98F278942749ECB13
Type httpd
Reporter Martin Holst Swende.
Modified 2014-09-03T00:00:00

Description

HTTP trailers could be used to replace HTTP headers late during request processing, potentially undoing or otherwise confusing modules that examined or modified request headers earlier. This fix adds the "MergeTrailers" directive to restore legacy behavior.