Re: Weird issue with "H2Push" combined with FilesMatch

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





On Tue, Oct 24, 2023 at 2:02 PM Paul <stormy22@xxxxxxxxx> wrote:
On 2023-10-24 13:17, Jose Stefan wrote:

Please don't top-post

> No, not that I am aware off. The push is only triggered by the
> "H2PushResource" directive shown. Which I tried to showcase with the
> 3^rd  test.
>
> Within fileA.php and fileB.php the stylesheet is loaded with this line:
> <link href="" rel="stylesheet">
>
> A tag within the html content, and not a header.
>
> To perform my tests I'm mostly using the command line:
> nghttp -vn URL

   ^^^^^^
What version of Apache / httpd? What server system / version?  I
personally had never heard of Nghttp, and their website appears to have
last been updated in 2015. (<https://nghttp2.org/>)


>
> But to remove PHP from the equation. I've now peformed the following test.
>
>  1. saved the generated content as a static fileA.html
>  2. changed to this line: <Files "fileA.html">
>
> And after the test I still get the push.
>
> --Jose Stefan
>
> ------------------------------------------------------------------------
> *From:* Paul <stormy22@xxxxxxxxx>
> *Sent:* Tuesday, October 24, 2023 12:55 PM
> *To:* users@xxxxxxxxxxxxxxxx <users@xxxxxxxxxxxxxxxx>
> *Subject:* Re: Weird issue with "H2Push" combined with
> FilesMatch
> On 2023-10-24 11:31, Jose Stefan wrote:
>> Hello,
>>
>> I have a weird issue while using "H2Push". I'm turning it off, but
>> depending where it's nested it doesn't work as expected. Subset of
>> config shown at the end. I'm using version: 2.4.52-1ubuntu4.6 on Ubuntu
>> 22.04 LTS.
>>
>> With the code as presented, it still triggers a push for "fileC.css". I
>> expect NO push to happen as it is turned off before
>> the"H2PushResource..." line.
>
> Quick question, not a solution.  Does you php (or other static
> environment) have any 'rel=preload'?
>>
>> Here's where I'm confused. I've performed the following individual tests:
>>
>>   * If I use the "H2Push off" outside of the FilesMatch (and comment the
>>     one inside), The push doesn't happen.
>>   *
>>     If I use both "H2Push off" and "H2PushResource..." outside of the
>>     FilesMatch (and comment the ones inside), The push doesn't happen.
>>   * If I comment out the "H2PushResource..." inside the FilesMatch, the
>>     push doesn't happen. Therefore, I know the config is hitting that part.
>>
>> It's only when both lines are inside the FilesMatch that I don't get the
>> expected results. Yet the context for h2push reads:
>> Context: server config, virtual host, directory, .htaccess
>>
>> The plan, eventually, is to enable just the early hints and not the
>> push. But I haven't even gotten to testing that part yet. My version of
>> httpd doesn't support "H2EarlyHint".
>>
>> Subset of the config:
>> ----------
>> H2Push on
>> ...
>> <IfModule mod_ssl.c>
>> <VirtualHost *:443>
>> ...
>> <IfModule http2_module>
>> #H2EarlyHints on
>> #H2Push off
>> #H2PushResource /fileC.css
>> <FilesMatch "^(fileA|fileB)\.php$">
>> H2Push off
>> H2PushResource /fileC.css
>> #H2EarlyHint ... Available in version 2.4.58 and
>> later.
>> </FilesMatch>
>> </IfModule>
>> ...
>> </VirtualHost>
>> </IfModule>...
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


Keep in mind that nghttp2 is a build requirement for HTTP/2, which was outlined in the threads pertaining to CVE 2033-44487. Testing with that tool should be fine.

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux