RESTED
RESTED copied to clipboard
Bug: Custom headers modified to lower case
Custom headers names are modified to lower case by RESTED plugin. For instance, if I set "Authorization" text as a key of header, the server receives "authorization" (checked in browser devel tools). Servers strictly requesting "Authorization" are than failing with deny access.
Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br authorization: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx test: xxxxxxx DNT: 1 Connection: keep-alive Cookie: PHPSESSID=xxxxxxxxxxxxxxxxxxxxxx Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache
Header names are case-insensitive. Modification may be done both by browser or server you should never rely on the case. https://www.rfc-editor.org/rfc/rfc7230#section-3.2
Clear. Ok, this isn't a bug. Anyway. It is not cool that the plugin is changing the case. I see it as unexpected behavior. The result is that users cannot use RESTED client with not strictly correct servers. User/client without direct access to the server (to fix it), has to look for another plugin to use.