Skip to content

HEAD method is advertised in the API but not allowed #7242

@ibnesayeed

Description

@ibnesayeed

Version information:

$ ipfs version --all
go-ipfs version: 0.5.0
Repo version: 9
System version: amd64/linux
Golang version: go1.13.10

Description:

It looks like the API now does not allow GET/HEAD requests as per #7097, but the HEAD request returns 405 Method Not Allowed response that ironically includes an Allow header that suggests HEAD is allowed.

$ curl -I http://localhost:5001/api/v0/version
HTTP/1.1 405 Method Not Allowed
Allow: HEAD
Allow: OPTIONS
Allow: POST
Content-Type: text/plain; charset=utf-8
Vary: Origin
X-Content-Type-Options: nosniff
Date: Tue, 28 Apr 2020 21:09:37 GMT
Content-Length: 25

Metadata

Metadata

Assignees

Labels

kind/bugA bug in existing code (including security flaws)need/triageNeeds initial labeling and prioritization

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions