[Koha] Http Bad request error messages

Pablo Bianchi pablo.bianchi at gmail.com
Wed Jun 25 06:55:12 NZST 2014 

Hi!

Librarians complains about a very annoying issue (perhaps a bug): Once in a
while they get this error:

* Bad Request*
  Your browser sent a request that this server could not understand.
  Size of a request header field exceeds server limit.

This happened with Firefox (v23 to v30, either Windows and Linux clients),
from Koha 3.14 to current (for us) 3.16.
I notice Owen Leonard already had this problem (bug #10857
<http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10857>). The
workaround is pretty simple: Just delete all browser cookies (or just Koha
ones).

I tried to reproduce the error, cleaning cookies and doing some big
searches. Even Koha documentation says they use three cookies (
http://koha-community.org/faqs/cookies-koha-use/) I ended up with this 6
cookies that all share this info:
    *Host*    *myCatalogURL*
    *Path*    /
    *Send for*    Any type of connection
    *Expires*    At end of session

But different name and content (copied at the end).

Cookies seems to exceeds the facto limit of 4093 bytes per domain (
http://browsercookielimits.x64.me/) but no the RFC2109 (
http://www.ietf.org/rfc/rfc2109.txt) so this shouldn't be a problem... I
tried increasing Apache LimitRequestFieldSize directive without luck.

Regards,
Pablo

Name    Hc2AHbPF
Content    38871 or BC=38870 or BC=38859 or BC=38863 or BC=38858 or
BC=38869 or BC=38854 or BC=38865 or BC=38868 or BC=38866 or BC=38856 or
BC=38875 or BC=38874 or BC=38853 or BC=38872 or BC=38873 or BC=38867 or
BC=38839 or BC=38880 or BC=38840 or BC=38885 or BC=38886 or BC=38882 or
BC=38886 or BC=38887 or BC=38890 or BC=38891 or BC=38879 or BC=38878 or
BC=38877 or BC=38864 or BC=38855 or BC=38852 or BC=38847 or BC=38846 or
BC=38845 or BC=38843 or BC=38841 or BC=38838 or BC=38837 or BC=38910
Name    LkvXIj08
Content
%7B%22offset%22%3A1%2C%22query%22%3A%22q%253Dccl%253DBC%25253D%25252238871%252522%252520or%252520BC%25253D%25252238870%252522%252520or%252520BC%25253D%25252238859%252522%252520or%252520BC%25253D%25252238863%252522%252520or%252520BC%25253D%25252238858%252522%252520or%252520BC%25253D%25252238869%252522%252520or%252520BC%25253D%25252238854%252522%252520or%252520BC%25253D%25252238865%252522%252520or%252520BC%25253D%25252238868%252522%252520or%252520BC%25253D%25252238866%252522%252520or%252520BC%25253D%25252238856%252522%252520or%252520BC%25253D%25252238875%252522%252520or%252520BC%25253D%25252238874%252522%252520or%252520BC%25253D%25252238853%252522%252520or%252520BC%25253D%25252238872%252522%252520or%252520BC%25253D%25252238873%252522%252520or%252520BC%25253D%25252238867%252522%252520or%252520BC%25253D%25252238839%252522%252520or%252520BC%25253D%25252238880%252522%252520or%252520BC%25253D%25252238840%252522%252520or%252520BC%25253D%25252238885%252522%252520or%252520BC%25253D%25252238886%252522%252520or%252520BC%25253D%25252238882%252522%252520or%252520BC%25253D%25252238886%252522%252520or%252520BC%25253D%25252238887%252522%252520or%252520BC%25253D%25252238890%252522%252520or%252520BC%25253D%25252238891%252522%252520or%252520BC%25253D%25252238879%252522%252520or%252520BC%25253D%25252238878%252522%252520or%252520BC%25253D%25252238877%252522%252520or%252520BC%25253D%25252238864%252522%252520or%252520BC%25253D%25252238855%252522%252520or%252520BC%25253D%25252238852%252522%252520or%252520BC%25253D%25252238847%252522%252520or%252520BC%25253D%25252238846%252522%252520or%252520BC%25253D%25252238845%252522%252520or%252520BC%25253D%25252238843%252522%252520or%252520BC%25253D%25252238841%252522%252520or%252520BC%25253D%25252238838%252522%252520or%252520BC%25253D%25252238837%252522%252520or%252520BC%25253D%25252238910%252522%22%2C%22limit%22%3A%22%22%2C%22sort%22%3A%22%22%2C%22pagelen%22%3A20%2C%22results%22%3A%5B560%2C695%2C1997%2C3046%2C3109%2C3399%2C4456%2C5775%2C6399%2C6477%2C6736%2C7115%2C8006%2C8181%2C9287%2C11811%2C11813%2C11816%2C11817%2C11818%5D%7D
Name    YRAFi4OC
Content
%7B%22offset%22%3A1%2C%22query%22%3A%22q%253Dccl%253D38871%252520or%252520BC%25253D38870%252520or%252520BC%25253D38859%252520or%252520BC%25253D38863%252520or%252520BC%25253D38858%252520or%252520BC%25253D38869%252520or%252520BC%25253D38854%252520or%252520BC%25253D38865%252520or%252520BC%25253D38868%252520or%252520BC%25253D38866%252520or%252520BC%25253D38856%252520or%252520BC%25253D38875%252520or%252520BC%25253D38874%252520or%252520BC%25253D38853%252520or%252520BC%25253D38872%252520or%252520BC%25253D38873%252520or%252520BC%25253D38867%252520or%252520BC%25253D38839%252520or%252520BC%25253D38880%252520or%252520BC%25253D38840%252520or%252520BC%25253D38885%252520or%252520BC%25253D38886%252520or%252520BC%25253D38882%252520or%252520BC%25253D38886%252520or%252520BC%25253D38887%252520or%252520BC%25253D38890%252520or%252520BC%25253D38891%252520or%252520BC%25253D38879%252520or%252520BC%25253D38878%252520or%252520BC%25253D38877%252520or%252520BC%25253D38864%252520or%252520BC%25253D38855%252520or%252520BC%25253D38852%252520or%252520BC%25253D38847%252520or%252520BC%25253D38846%252520or%252520BC%25253D38845%252520or%252520BC%25253D38843%252520or%252520BC%25253D38841%252520or%252520BC%25253D38838%252520or%252520BC%25253D38837%252520or%252520BC%25253D38910%22%2C%22limit%22%3A%22%22%2C%22sort%22%3A%22%22%2C%22pagelen%22%3A20%2C%22results%22%3A%5B560%2C695%2C1997%2C3046%2C3109%2C3399%2C4456%2C5775%2C6399%2C6477%2C6736%2C7115%2C8006%2C8181%2C9287%2C11811%2C11813%2C11816%2C11817%2C11818%5D%7D
Name    mEXufDzN
Content
%7B%22offset%22%3A1%2C%22query%22%3A%22q%253Dccl%253D38871%252520or%252520BC%25253D38870%252520or%252520BC%25253D38859%252520or%252520BC%25253D38863%252520or%252520BC%25253D38858%252520or%252520BC%25253D38869%252520or%252520BC%25253D38854%252520or%252520BC%25253D38865%252520or%252520BC%25253D38868%252520or%252520BC%25253D38866%252520or%252520BC%25253D38856%252520or%252520BC%25253D38875%252520or%252520BC%25253D38874%252520or%252520BC%25253D38853%252520or%252520BC%25253D38872%252520or%252520BC%25253D38873%252520or%252520BC%25253D38867%252520or%252520BC%25253D38839%252520or%252520BC%25253D38880%252520or%252520BC%25253D38840%252520or%252520BC%25253D38885%252520or%252520BC%25253D38886%252520or%252520BC%25253D38882%252520or%252520BC%25253D38886%252520or%252520BC%25253D38887%252520or%252520BC%25253D38890%252520or%252520BC%25253D38891%252520or%252520BC%25253D38879%252520or%252520BC%25253D38878%252520or%252520BC%25253D38877%252520or%252520BC%25253D38864%252520or%252520BC%25253D38855%252520or%252520BC%25253D38852%252520or%252520BC%25253D38847%252520or%252520BC%25253D38846%252520or%252520BC%25253D38845%252520or%252520BC%25253D38843%252520or%252520BC%25253D38841%252520or%252520BC%25253D38838%252520or%252520BC%25253D38837%252520or%252520BC%25253D38910%22%2C%22limit%22%3A%22%22%2C%22sort%22%3A%22%22%2C%22pagelen%22%3A20%2C%22results%22%3A%5B560%2C695%2C1997%2C3046%2C3109%2C3399%2C4456%2C5775%2C6399%2C6477%2C6736%2C7115%2C8006%2C8181%2C9287%2C11811%2C11813%2C11816%2C11817%2C11818%5D%7D
Name    CGISESSID
Content    d6804e5e6a478944bc304b7baa8918a5
Name    4010859Q
Content
%7B%22offset%22%3A1%2C%22query%22%3A%22q%253Dccl%253D38871%252520or%252520BC%25253D38870%252520or%252520BC%25253D38859%252520or%252520BC%25253D38863%252520or%252520BC%25253D38858%252520or%252520BC%25253D38869%252520or%252520BC%25253D38854%252520or%252520BC%25253D38865%252520or%252520BC%25253D38868%252520or%252520BC%25253D38866%252520or%252520BC%25253D38856%252520or%252520BC%25253D38875%252520or%252520BC%25253D38874%252520or%252520BC%25253D38853%252520or%252520BC%25253D38872%252520or%252520BC%25253D38873%252520or%252520BC%25253D38867%252520or%252520BC%25253D38839%252520or%252520BC%25253D38880%252520or%252520BC%25253D38840%252520or%252520BC%25253D38885%252520or%252520BC%25253D38886%252520or%252520BC%25253D38882%252520or%252520BC%25253D38886%252520or%252520BC%25253D38887%252520or%252520BC%25253D38890%252520or%252520BC%25253D38891%252520or%252520BC%25253D38879%252520or%252520BC%25253D38878%252520or%252520BC%25253D38877%252520or%252520BC%25253D38864%252520or%252520BC%25253D38855%252520or%252520BC%25253D38852%252520or%252520BC%25253D38847%252520or%252520BC%25253D38846%252520or%252520BC%25253D38845%252520or%252520BC%25253D38843%252520or%252520BC%25253D38841%252520or%252520BC%25253D38838%252520or%252520BC%25253D38837%252520or%252520BC%25253D38910%22%2C%22limit%22%3A%22%22%2C%22sort%22%3A%22%22%2C%22pagelen%22%3A20%2C%22results%22%3A%5B560%2C695%2C1997%2C3046%2C3109%2C3399%2C4456%2C5775%2C6399%2C6477%2C6736%2C7115%2C8006%2C8181%2C9287%2C11811%2C11813%2C11816%2C11817%2C11818%5D%7D

Recursive url-decode of cookies content:
1)
%7B%22offset%22%3A1%2C%22query%22%3A%22q%253Dccl%253D38871%252520or%252520BC%25253D38870%252520or%252520BC%25253D38859%252520or%252520BC%25253D38863%252520or%252520BC%25253D38858%252520or%252520BC%25253D38869%252520or%252520BC%25253D38854%252520or%252520BC%25253D38865%252520or%252520BC%25253D38868%252520or%252520BC%25253D38866%252520or%252520BC%25253D38856%252520or%252520BC%25253D38875%252520or%252520BC%25253D38874%252520or%252520BC%25253D38853%252520or%252520BC%25253D38872%252520or%252520BC%25253D38873%252520or%252520BC%25253D38867%252520or%252520BC%25253D38839%252520or%252520BC%25253D38880%252520or%252520BC%25253D38840%252520or%252520BC%25253D38885%252520or%252520BC%25253D38886%252520or%252520BC%25253D38882%252520or%252520BC%25253D38886%252520or%252520BC%25253D38887%252520or%252520BC%25253D38890%252520or%252520BC%25253D38891%252520or%252520BC%25253D38879%252520or%252520BC%25253D38878%252520or%252520BC%25253D38877%252520or%252520BC%25253D38864%252520or%252520BC%25253D38855%252520or%252520BC%25253D38852%252520or%252520BC%25253D38847%252520or%252520BC%25253D38846%252520or%252520BC%25253D38845%252520or%252520BC%25253D38843%252520or%252520BC%25253D38841%252520or%252520BC%25253D38838%252520or%252520BC%25253D38837%252520or%252520BC%25253D38910%22%2C%22limit%22%3A%22%22%2C%22sort%22%3A%22%22%2C%22pagelen%22%3A20%2C%22results%22%3A%5B560%2C695%2C1997%2C3046%2C3109%2C3399%2C4456%2C5775%2C6399%2C6477%2C6736%2C7115%2C8006%2C8181%2C9287%2C11811%2C11813%2C11816%2C11817%2C11818%5D%7D
2)
{"offset":1,"query":"q%3Dccl%3D38871%2520or%2520BC%253D38870%2520or%2520BC%253D38859%2520or%2520BC%253D38863%2520or%2520BC%253D38858%2520or%2520BC%253D38869%2520or%2520BC%253D38854%2520or%2520BC%253D38865%2520or%2520BC%253D38868%2520or%2520BC%253D38866%2520or%2520BC%253D38856%2520or%2520BC%253D38875%2520or%2520BC%253D38874%2520or%2520BC%253D38853%2520or%2520BC%253D38872%2520or%2520BC%253D38873%2520or%2520BC%253D38867%2520or%2520BC%253D38839%2520or%2520BC%253D38880%2520or%2520BC%253D38840%2520or%2520BC%253D38885%2520or%2520BC%253D38886%2520or%2520BC%253D38882%2520or%2520BC%253D38886%2520or%2520BC%253D38887%2520or%2520BC%253D38890%2520or%2520BC%253D38891%2520or%2520BC%253D38879%2520or%2520BC%253D38878%2520or%2520BC%253D38877%2520or%2520BC%253D38864%2520or%2520BC%253D38855%2520or%2520BC%253D38852%2520or%2520BC%253D38847%2520or%2520BC%253D38846%2520or%2520BC%253D38845%2520or%2520BC%253D38843%2520or%2520BC%253D38841%2520or%2520BC%253D38838%2520or%2520BC%253D38837%2520or%2520BC%253D38910","limit":"","sort":"","pagelen":20,"results":[560,695,1997,3046,3109,3399,4456,5775,6399,6477,6736,7115,8006,8181,9287,11811,11813,11816,11817,11818]}
3)
{"offset":1,"query":"q=ccl=38871%20or%20BC%3D38870%20or%20BC%3D38859%20or%20BC%3D38863%20or%20BC%3D38858%20or%20BC%3D38869%20or%20BC%3D38854%20or%20BC%3D38865%20or%20BC%3D38868%20or%20BC%3D38866%20or%20BC%3D38856%20or%20BC%3D38875%20or%20BC%3D38874%20or%20BC%3D38853%20or%20BC%3D38872%20or%20BC%3D38873%20or%20BC%3D38867%20or%20BC%3D38839%20or%20BC%3D38880%20or%20BC%3D38840%20or%20BC%3D38885%20or%20BC%3D38886%20or%20BC%3D38882%20or%20BC%3D38886%20or%20BC%3D38887%20or%20BC%3D38890%20or%20BC%3D38891%20or%20BC%3D38879%20or%20BC%3D38878%20or%20BC%3D38877%20or%20BC%3D38864%20or%20BC%3D38855%20or%20BC%3D38852%20or%20BC%3D38847%20or%20BC%3D38846%20or%20BC%3D38845%20or%20BC%3D38843%20or%20BC%3D38841%20or%20BC%3D38838%20or%20BC%3D38837%20or%20BC%3D38910","limit":"","sort":"","pagelen":20,"results":[560,695,1997,3046,3109,3399,4456,5775,6399,6477,6736,7115,8006,8181,9287,11811,11813,11816,11817,11818]}
4)  {"offset":1,"query":"q=ccl=38871 or BC=38870 or BC=38859 or BC=38863 or
BC=38858 or BC=38869 or BC=38854 or BC=38865 or BC=38868 or BC=38866 or
BC=38856 or BC=38875 or BC=38874 or BC=38853 or BC=38872 or BC=38873 or
BC=38867 or BC=38839 or BC=38880 or BC=38840 or BC=38885 or BC=38886 or
BC=38882 or BC=38886 or BC=38887 or BC=38890 or BC=38891 or BC=38879 or
BC=38878 or BC=38877 or BC=38864 or BC=38855 or BC=38852 or BC=38847 or
BC=38846 or BC=38845 or BC=38843 or BC=38841 or BC=38838 or BC=38837 or
BC=38910","limit":"","sort":"","pagelen":20,"results":[560,695,1997,3046,3109,3399,4456,5775,6399,6477,6736,7115,8006,8181,9287,11811,11813,11816,11817,11818]}
5)  {
   "offset":1,
   "query":"q=ccl=38871 or BC=38870 or BC=38859 or BC=38863 or BC=38858 or
BC=38869 or BC=38854 or BC=38865 or BC=38868 or BC=38866 or BC=38856 or
BC=38875 or BC=38874 or BC=38853 or BC=38872 or BC=38873 or BC=38867 or
BC=38839 or BC=38880 or BC=38840 or BC=38885 or BC=38886 or BC=38882 or
BC=38886 or BC=38887 or BC=38890 or BC=38891 or BC=38879 or BC=38878 or
BC=38877 or BC=38864 or BC=38855 or BC=38852 or BC=38847 or BC=38846 or
BC=38845 or BC=38843 or BC=38841 or BC=38838 or BC=38837 or BC=38910",
   "limit":"",
   "sort":"",
   "pagelen":20,
   "results":[
      560,
      695,
      1997,
      3046,
      3109,
      3399,
      4456,
      5775,
      6399,
      6477,
      6736,
      7115,
      8006,
      8181,
      9287,
      11811,
      11813,
      11816,
      11817,
      11818
   ]
}

More information about the Koha mailing list