mitre / mitre/HTTP-Proxy-Servlet
Use BufferedHttpEntity
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 1.5k
- Forks
- 557
- PR merge metrics
- No merged PRs in 30d
Description
When the Proxy Servlet forwards to a server that uses NTLM auth, the initialization of the connection requires some roundtrips.
The initial request sends the payload from the Proxy Servlet, the server response 401, then there is a challenge and after four or five requests and responses the connection is authenticated and the Http Client could send the payload.
InputStreamEntity could be read just once, because is a stream, so is non-repeatable. Using the class BufferedHttpEntity passing the InputStreamEntity as parameter solves the problem.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the Proxy Servlet's request-forwarding path and locate where InputStreamEntity is created. Read the surrounding Apache HttpClient entity handling, then verify that the forwarded payload remains available through the NTLM authentication round trips and can be sent after authentication completes.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- networking
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100