Status/Resolution/Reason: Closed/Fixed/Fixed
Reporter/Name(from Bugbase): Matthew Clemente / Matthew Clemente ()
Created: 12/11/2017
Components: Net Protocols, HTTP
Versions: 2016,11.0,2018
Failure Type: Non Functioning
Found In Build/Fixed In Build: 11,0,13,303668 / update
Priority/Frequency: Normal / All users will encounter
Locale/System: ALL / Win 2012 Server x64
Vote Count: 2
Problem Description: ColdFusion ignores the body content sent via HTTP DELETE requests. This is similar to this fixes bug: https://tracker.adobe.com/#/view/CF-4149198
As I understand it, while it is commonly recommended not to send a DELETE request body, the spec (https://tools.ietf.org/html/rfc7231#section-4.3.5) does not explicitly disallow it.
Furthermore, prominent public APIs, including Cloudflare and SendGrid, utilize request bodies in their DELETE methods. Utilizing these APIs with ColdFusion is difficult due to this current limitation.
Steps to Reproduce:
______________________________
index.cfm
<cfoutput>
<cfscript>
cfhttp( method="DELETE", charset="utf-8", url="PATH-TO-OTHER-PAGE/showrequest.cfm", result="result" ) {
cfhttpparam( type="body", value="hello" );
}
writeOutput( result.filecontent );
</cfscript>
</cfoutput>
______________________________
showrequest.cfm
<cfoutput>
<cfdump var="#getHttpRequestData().content#" format="html" abort="true">
</cfoutput>
______________________________
Actual Result: [empty string]
Expected Result: hello
Any Workarounds: Using a Java HTTP implementationAttachments:
Comments: