tree e84c84e72af63bbf3d99e33f0ca261d083d26400
parent 72c692701ab4197f1f8ec7594b7e8ef5082b9d9e
author Christopher Faulet <cfaulet@haproxy.com> 1564150621 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1564392397 +0200

BUG/MEDIUM: hlua: Check the calling direction in lua functions of the HTTP class

It is invalid to manipulate responses from http-request rules or to manipulate
requests from http-response rules. When http-request rules are evaluated, the
connection to server is not yet established, so there is no response at all. And
when http-response rules are evaluated, the request has already been sent to the
server.

Now, the calling direction is checked. So functions "txn.http:req_*" can now
only be called from http-request rules and the functions "txn.http:res_*" can
only be called from http-response rules.

This issue was reported on Github (#190).

This patch must be backported to all versions since the 1.6.

(cherry picked from commit 84a6d5bc217a418db8efc4e76a0a32860db2c608)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>