File apache2-CVE-2024-38476-8.patch of Package apache2.34771
Index: httpd-2.4.23/modules/metadata/mod_headers.c
===================================================================
--- httpd-2.4.23.orig/modules/metadata/mod_headers.c
+++ httpd-2.4.23/modules/metadata/mod_headers.c
@@ -790,14 +790,14 @@ static int do_headers_fixup(request_rec
break;
case hdr_set:
if (!strcasecmp(hdr->header, "Content-Type")) {
- ap_set_content_type(r, process_tags(hdr, r));
+ ap_set_content_type_ex(r, process_tags(hdr, r), 1);
}
apr_table_setn(headers, hdr->header, process_tags(hdr, r));
break;
case hdr_setifempty:
if (NULL == apr_table_get(headers, hdr->header)) {
if (!strcasecmp(hdr->header, "Content-Type")) {
- ap_set_content_type(r, process_tags(hdr, r));
+ ap_set_content_type_ex(r, process_tags(hdr, r), 1);
}
apr_table_setn(headers, hdr->header, process_tags(hdr, r));
}
@@ -817,7 +817,7 @@ static int do_headers_fixup(request_rec
const char *repl = process_regexp(hdr, r->content_type, r);
if (repl == NULL)
return 0;
- ap_set_content_type(r, repl);
+ ap_set_content_type_ex(r, repl, 1);
}
if (apr_table_get(headers, hdr->header)) {
edit_do ed;