Re: Http POST requests changed to GET by proxy?

schonlinner@xxxxxxxxx wrote:
Hi,

we have a software solution which works fine since several years for
several different companies: It's an applet which communicates with a
servlet using HTTP POST connections and displays results from the
server/servlet.

A new potential customer (i.e. company) now encounters a weird
behaviour: They have some kind of Microsoft proxy server sitting
between the applet and the servlet engine.

When our applet creates a HTTP connection to the server it uses
something as follows:

conn.setRequestMethod ("POST");
conn.setRequestHeader(...,...);
PrintWriter out = new PrintWriter(connect.getOutputStream());
out.println(data);
out.flush();
connect.connect();

Normally one would expect that this leads to a call to doPost of the
servlet.
But for an unknown reason the Microsoft proxy does something completely
unknown and creates an HTTP GET request, thus doGet will be called on
the server and the content of the request is missing and the request
thus is invalid.
This does not happen all the time, it happens round about every tenth
time or after about 15 secs of idle time (i.e. when the user does not
make a connection to the server).

Does anybody out there have a similar problem and perhaps a solution?
Why does the MS proxy change something in the request?

We cannot further examine which request headers get sent because the
presentation is over (had to use a modem dial connection) and all we
have are the log entries.

Hoping for some clarifying answers,
Alex

This may not be related but some versions of Internet Explorer on a Mac do a get before the post if the user clicks on the back button. We now just tell all Mac users that IE is no longer supported and they should upgrade to a different browser.

Jeff Coffield
.

Relevant Pages

  • Re: breaking the model
    ... > The forms data then is in the Request object. ... HTTP Request; in this case, the form POST Request from the Page. ... client and server. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: [Full-disclosure] Multiple Vulnerabilities of PY Software Active Webcam WebServer
    ... It appers that the server does not use multithreading... ... Before the administrator press "Cancel" or "Yes",the other request ... > Multiple Vulnerabilities of PY Software Active Webcam WebServer ... > will be paused,that means the other user cannt Access the HTTP ...
    (Full-Disclosure)
  • httpedit: low-level interface to HTTP
    ... We just published httpedit, ... any of the data you are sending, e.g. when debugging an HTTP server ... By modifying the request and seeing the response on the same ...
    (Pen-Test)
  • Re: How to write something to a html textfield and send it?
    ... > No need for controlling any particular browser. ... I'm not familiar with HTTP user ... and building the request in your program. ... The server doesn't know anything about a textfield; ...
    (comp.programming)
  • Re: Http POST requests changed to GET by proxy?
    ... between the applet and the servlet engine. ... When our applet creates a HTTP connection to the server it uses ... unknown and creates an HTTP GET request, thus doGet will be called on ...
    (comp.lang.java.programmer)