Description
Hrvoje Jambrovic opened SPR-10701 and commented
Linked with #14743
ServletUriComponentsBuilder takes X-Forwarded-Host value from header (if exists) and puts it as "host".
If X-Forwarded-Host is:
X-Forwarded-Host: webtest.foo.bar.com:443
creating uri produces error:
org.springframework.web.util.NestedServletException: Request processing failed; nested exception is java.lang.IllegalStateException: Could not create URI object: Malformed IPv6 address at index 8: http://[webtest.foo.bar.com:443]:8180/api/person/449089
at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:948)
...
Definition of Host header:
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23
X-Forwarded-Host is a copy of Host header:
http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#x-headers
Affects: 3.2.1
Issue Links:
- X-Forwarded-Host handling in ServletUriComponentsBuilder does not treat ports correctly [SPR-10718] #15346 X-Forwarded-Host handling in ServletUriComponentsBuilder does not treat ports correctly ("is duplicated by")
- X-Forwarded-Port with Comma Separated List Not Able to be Parsed in Spring 4.1.x [SPR-12813] #17410 X-Forwarded-Port with Comma Separated List Not Able to be Parsed in Spring 4.1.x