CFHTTP only follows GET redirects, allow post and delete via redirect="lax"

Description

By http spec, only a GET should have a body, add the option to be less strict, i.e lax

https://dev.lucee.org/t/migrating-from-coldfusion-2016-to-lucee/12949/143

Lucee is currently using the stricter default, so we don't match ACF behaviour here?

https://hc.apache.org/httpcomponents-client-4.5.x/current/httpclient/apidocs/org/apache/http/impl/client/DefaultRedirectStrategy.html

there is a lax redirect strategy

https://hc.apache.org/httpcomponents-client-4.5.x/current/httpclient/apidocs/org/apache/http/impl/client/LaxRedirectStrategy.html

Attachments

26 Apr 2025, 11:24 am

Activity

Pothys - MitrahSoft
2 May 2025 at 08:11

I have tested this ticket using Lucee version 7.0.0.219-SNAPSHOT. When I executed CFHTTP requests with the methods GET, POST, and DELETE using redirect="lax", it returned the file content correctly after the redirect and is now working as expected.

Zac Spitzer
26 April 2025 at 15:41

https://github.com/lucee/Lucee/commit/3423418bc652abcd95e61e2aa3cdc1aa9a62be20

Resize issue view side panel

Fixed

Details

Assignee

Pothys - MitrahSoft

Reporter

Zac Spitzer

Labels

acf-compatcfhttp

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Sprint

7.0.0

Fix versions

7.0.0.208

Priority

New

Created 26 April 2025 at 11:24

Updated 2 May 2025 at 08:11

Resolved 2 May 2025 at 08:11