search

Arborator / arborator-server

The Arborator software is aimed at collaboratively annotating dependency corpora.
http://arborator.ilpga.fr
GNU Affero General Public License v3.0
24 stars 12 forks source link

invalid http headers? #25

Open gpythomas opened 6 years ago

gpythomas commented 6 years ago

I recently attempted to reinstall arborator (commit a16f3a3) on a new server which runs Ubuntu 16.04 and apache2 (2.4.18). When trying to access arborator in firefox, I get a 500 internal server error. I can run other CGI scripts from the directory where arborator is installed (/var/www/html/), so the problem is specific to my arborator installation. Apache2's error log reads:

[http:error] ... AH02429: Response header name '<!--' contains invalid characters ....

These posts suggest there might be an issue with a cgi script that outputs an invalid http header:

https://serverfault.com/questions/853103/500-internal-server-ah02429-response-header-name https://blog.tigertech.net/posts/apache-cve-2016-8743/

I haven't been able to find the issue in arborator's cgi scripts. I wonder if there is indeed an issue with these scripts or if my server is not properly configured.

marinecourtin commented 6 years ago

Hi @gpythomas , could you print out the invalid http header and the name of the script you were trying to execute ?