{"action":"created","issue":{"url":"https://api.github.com/repos/spring-projects/spring-security/issues/572","repository_url":"https://api.github.com/repos/spring-projects/spring-security","labels_url":"https://api.github.com/repos/spring-projects/spring-security/issues/572/labels{/name}","comments_url":"https://api.github.com/repos/spring-projects/spring-security/issues/572/comments","events_url":"https://api.github.com/repos/spring-projects/spring-security/issues/572/events","html_url":"https://github.com/spring-projects/spring-security/issues/572","id":131765761,"number":572,"title":"SEC-308: Lookup of headers in SavedRequestAwareWrapper is not case insensitive","user":{"login":"spring-issuemaster","id":16028288,"avatar_url":"https://avatars.githubusercontent.com/u/16028288?v=3","gravatar_id":"","url":"https://api.github.com/users/spring-issuemaster","html_url":"https://github.com/spring-issuemaster","followers_url":"https://api.github.com/users/spring-issuemaster/followers","following_url":"https://api.github.com/users/spring-issuemaster/following{/other_user}","gists_url":"https://api.github.com/users/spring-issuemaster/gists{/gist_id}","starred_url":"https://api.github.com/users/spring-issuemaster/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spring-issuemaster/subscriptions","organizations_url":"https://api.github.com/users/spring-issuemaster/orgs","repos_url":"https://api.github.com/users/spring-issuemaster/repos","events_url":"https://api.github.com/users/spring-issuemaster/events{/privacy}","received_events_url":"https://api.github.com/users/spring-issuemaster/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/spring-projects/spring-security/labels/Bug","name":"Bug","color":"eeeeee"},{"url":"https://api.github.com/repos/spring-projects/spring-security/labels/Closed","name":"Closed","color":"ededed"},{"url":"https://api.github.com/repos/spring-projects/spring-security/labels/Core","name":"Core","color":"000000"},{"url":"https://api.github.com/repos/spring-projects/spring-security/labels/Fixed","name":"Fixed","color":"ededed"},{"url":"https://api.github.com/repos/spring-projects/spring-security/labels/Jira","name":"Jira","color":"ededed"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/spring-projects/spring-security/milestones/8","html_url":"https://github.com/spring-projects/spring-security/milestones/1.0.2","labels_url":"https://api.github.com/repos/spring-projects/spring-security/milestones/8/labels","id":1567172,"number":8,"title":"1.0.2","description":null,"creator":{"login":"spring-issuemaster","id":16028288,"avatar_url":"https://avatars.githubusercontent.com/u/16028288?v=3","gravatar_id":"","url":"https://api.github.com/users/spring-issuemaster","html_url":"https://github.com/spring-issuemaster","followers_url":"https://api.github.com/users/spring-issuemaster/followers","following_url":"https://api.github.com/users/spring-issuemaster/following{/other_user}","gists_url":"https://api.github.com/users/spring-issuemaster/gists{/gist_id}","starred_url":"https://api.github.com/users/spring-issuemaster/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spring-issuemaster/subscriptions","organizations_url":"https://api.github.com/users/spring-issuemaster/orgs","repos_url":"https://api.github.com/users/spring-issuemaster/repos","events_url":"https://api.github.com/users/spring-issuemaster/events{/privacy}","received_events_url":"https://api.github.com/users/spring-issuemaster/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":34,"state":"closed","created_at":"2016-02-05T21:45:40Z","updated_at":"2016-02-05T21:51:00Z","due_on":"2006-10-03T00:00:00Z","closed_at":"2016-02-05T21:45:40Z"},"comments":3,"created_at":"2006-06-29T03:03:56Z","updated_at":"2016-02-06T07:18:14Z","closed_at":"2006-09-28T18:44:37Z","body":"[\"John Hampton\":https://jira.spring.io/secure/ViewProfile.jspa?name=jhampton] (Migrated from [\"SEC-308\":https://jira.spring.io/browse/SEC-308]) said:\n\nAccording to the servlet spec, lookups using HttpServletRequest.getHeader and getHeaders should be case insensitive.  The current implementation of SavedRequest uses a HashMap to store saved headers.  The result is that the lookup of headers by name is case sensitive when SavedRequestAwareWrapper delegates to a SavedRequest.\n\nWe use a library that relies on the User-Agent header for rendering.  We experienced problems with rendering on the first page after login.  After debugging we found that the library was not able to get the correct value for the User-Agent due to the case sensitivity of the SavedRequest implementation.  I am attaching a patch that fixes this problem.  The patch is against the 1.0.1 tag.\n\nAfter redirect after login:\nrequest.getHeader(\"User-Agent\") returns null;\nrequest.getHeader(\"user-agent\") returns the correct value;\n\nNormal Request:\nrequest.getHeader(\"User-Agent\") returns the correct value;\nrequest.getHeader(\"user-agent\") returns the correct value;"},"comment":{"url":"https://api.github.com/repos/spring-projects/spring-security/issues/comments/180712640","html_url":"https://github.com/spring-projects/spring-security/issues/572#issuecomment-180712640","issue_url":"https://api.github.com/repos/spring-projects/spring-security/issues/572","id":180712640,"user":{"login":"spring-issuemaster","id":16028288,"avatar_url":"https://avatars.githubusercontent.com/u/16028288?v=3","gravatar_id":"","url":"https://api.github.com/users/spring-issuemaster","html_url":"https://github.com/spring-issuemaster","followers_url":"https://api.github.com/users/spring-issuemaster/followers","following_url":"https://api.github.com/users/spring-issuemaster/following{/other_user}","gists_url":"https://api.github.com/users/spring-issuemaster/gists{/gist_id}","starred_url":"https://api.github.com/users/spring-issuemaster/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spring-issuemaster/subscriptions","organizations_url":"https://api.github.com/users/spring-issuemaster/orgs","repos_url":"https://api.github.com/users/spring-issuemaster/repos","events_url":"https://api.github.com/users/spring-issuemaster/events{/privacy}","received_events_url":"https://api.github.com/users/spring-issuemaster/received_events","type":"User","site_admin":false},"created_at":"2016-02-06T07:18:14Z","updated_at":"2016-02-06T07:18:14Z","body":"\n\nThis issue duplicates #577"}}