Re: Date header and Java 11 HTTP client

2018-10-31 Thread Thomas Lußnig
Hi all, from the count of problems that are upcomming with these limits. I think there should be an switch to allowing all header. Because why limit them? Anyone who wan't to misuse them can to it via plain "Socket" or SslSocket without limit. I think there are more samples why these limit is b

Re: RFR [12]: 8203850: java.net.http HTTP client should allow specifying Origin and Referer headers

2018-10-11 Thread Thomas Lußnig
Hi, i did an quick check of the change: From: - E-Mail-Adresse des Nutzers, der die Anfrage stellte (heute unüblich). RFC 2616 sagt hierzu, dass der |From:| /nicht/ ohne ausdrückliche Genehmigung des Nutzers gesendet werden darf. Why this is now allowed

HttpClient Headers

2018-10-04 Thread Thomas Lußnig
Hi, i have an question about the new HttpClient from JDK11. Is there any good reason that the Referer header is restricted? Because i have scenarios where the customer server expect Referer header in the Login sequence. So is there any way how to set restricted headers? Gruß Thomas On 14.08

Re: RFR [11]: 8207966 HttpClient response without content-length does not return body

2018-08-14 Thread Thomas Lußnig
there was an mandatory header missing. Gruß Thomas Lußnig p.s. Great to see that an fix is available soon. On 14.08.2018 15:59:51, Michael McMahon wrote: Hi, This is an important fix for 11 which addresses the problem where HTTP/1.0 responses that do not include a content-length header are not