Uploaded image for project: 'DSpace'
  1. DSpace
  2. DS-4340

Duplicate Headers when bitstream has a comma in the title (Chrome) - JSPUI Only

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Code Review Needed (View Workflow)
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 1.6.0, 1.8.0, 3.0, 4.9, 6.3, 5.10
    • Fix Version/s: 6.4, 5.11
    • Component/s: JSPUI
    • Labels:
    • Attachments:
      0
    • Comments:
      2
    • Documentation Status:
      Not Required

      Description

      So the error:
      Duplicate headers received from server
      The response from the server contained duplicate headers. This problem is generally the result of a misconfigured website or proxy. Only the website or proxy administrator can fix this issue.
      Error 349 (net::ERR_RESPONSE_HEADERS_MULTIPLE_CONTENT_DISPOSITION): Multiple distinct Content-Disposition headers received. This is disallowed to protect against HTTP response splitting attacks.

      How to reproduce this error:
      The error only happens on Chrome.
      On XMLUI or JSPUI.

      • Upload a file that contains a comma in the title.
      • Go to the item view page for item.
      • On this page it should list the bitstreams. Download the bitstream with the comma in the title.
      • This should produce the above error.

      I think you need to ensure that the file is one that will be downloaded and not one viewed in the browser for the error to occur.

      The affected versions I listed are of the versions I've tested. But I'd assume this is an issue with all of them.

      Does anyone have a fix for this issue?

      I've noticed this problem on other software such as http://tracker.moodle.org/browse/MDL-32889
      I've attempted the fix that was applied to Moodle on Dspace. i.e. enclosing the filename in quotes
      such as:
      response.setHeader("Content-Disposition", "attachment;filename=" +'"' + name + '"');

        Attachments

          Activity

            People

            Assignee:
            bollini Andrea Bollini (4Science)
            Reporter:
            jonathanblood Jonathan Blood
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated: