Can Tomcat accept HTTP 1.1 requests without a Host header?

青春壹個敷衍的年華 提交于 2019-12-05 07:19:14

As you already noted, HTTP 1.1 spec says (bold mine):

A client MUST include a Host header field in all HTTP/1.1 request messages. [...] An HTTP/1.1 proxy MUST ensure that any request message it forwards does contain an appropriate Host header field that identifies the service being requested by the proxy. All Internet-based HTTP/1.1 servers MUST respond with a 400 (Bad Request) status code to any HTTP/1.1 request message which lacks a Host header field.

The client is using HTTP 1.1 protocol incorrectly, you should not try to work around that on the server side. What you can do is setup some custom HTTP proxy that will just add the Host header. But that's a dirty workaround. Alternatively downgrade the protocol to 1.0.

Also note that even if you somehow manage to make Tomcat accept such requests (which is against the specification), you'll still run into some issues if any HTTP proxy is between ends.

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!