Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-7878

prevent restlet resources from sending duplicate Date and Server headers

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.11.1
    • Fix Version/s: 3.0.0-m3, 2.11.2
    • Component/s: Transport
    • Labels:
      None
    • Story Points:
      1
    • Sprint:
      Sprint 34, Sprint 35

      Description

      When a Nexus Restlet resource is requested ( service/local/* ), restlet sends back duplicate Date and Server headers.

      There should be only one Date header, and Jetty provides this for all responses:

      http://download.eclipse.org/jetty/stable-8/xref/org/eclipse/jetty/http/HttpGenerator.html#482

      There should only be one Server header, with each product/version joined in the header value by a single space.

      http://pretty-rfc.herokuapp.com/RFC2616#header.server
      http://pretty-rfc.herokuapp.com/RFC2616#product.tokens

      < HTTP/1.1 200 OK
      < Date: Sat, 03 Jan 2015 16:16:33 GMT
      < Server: Nexus/2.11.1-01
      < X-Frame-Options: SAMEORIGIN
      < X-Content-Type-Options: nosniff
      < Set-Cookie: JSESSIONID=2f781ca7-d955-45c7-99e4-a84cdcfa6d4a; Path=/nexus; HttpOnly
      < Set-Cookie: rememberMe=deleteMe; Path=/nexus; Max-Age=0; Expires=Fri, 02-Jan-2015 16:16:33 GMT
      < Content-Type: application/xml; charset=UTF-8
      < Date: Sat, 03 Jan 2015 16:16:33 GMT
      < Vary: Accept-Charset, Accept-Encoding, Accept-Language, Accept
      < Server: Noelios-Restlet-Engine/1.1.6-SONATYPE-5348-V8
      < Content-Length: 10320

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              jtom Joe Tom
              Reporter:
              plynch Peter Lynch
              Last Updated By:
              Peter Lynch Peter Lynch
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title