From 4c8a7c2537193ad0738cab485a991916232ba76e Mon Sep 17 00:00:00 2001 From: Alejandro Estringana Ruiz Date: Tue, 17 Feb 2026 15:51:37 +0100 Subject: [PATCH 1/4] Enable span headers tags on PHP --- manifests/php.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifests/php.yml b/manifests/php.yml index 81de35a47c3..f6476847e03 100644 --- a/manifests/php.yml +++ b/manifests/php.yml @@ -392,7 +392,7 @@ manifest: tests/appsec/test_service_activation_metric.py::TestServiceActivationRemoteConfigurationConfigMetric: missing_feature tests/appsec/test_shell_execution.py::Test_ShellExecution: v0.95.0 tests/appsec/test_shell_execution.py::Test_ShellExecution::test_truncate_1st_argument: bug (APPSEC-55673) - tests/appsec/test_span_tags_headers.py: bug (APPSEC-61286) + tests/appsec/test_span_tags_headers.py: v1.17.0-dev tests/appsec/test_suspicious_attacker_blocking.py::Test_Suspicious_Attacker_Blocking: v1.13.0+4663b2fa7c20c6920f347d059b57dc2a419cb7f7 tests/appsec/test_trace_tagging.py::Test_TraceTaggingRules: v1.12.0 tests/appsec/test_trace_tagging.py::Test_TraceTaggingRulesRcCapability: v1.12.0 From c884f76c0a028e4676a02e2e41e49862dc40f008 Mon Sep 17 00:00:00 2001 From: Alejandro Estringana Ruiz Date: Mon, 23 Feb 2026 15:28:02 +0100 Subject: [PATCH 2/4] Stop tests on fpm --- manifests/php.yml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/manifests/php.yml b/manifests/php.yml index f6476847e03..789105bad0a 100644 --- a/manifests/php.yml +++ b/manifests/php.yml @@ -392,7 +392,17 @@ manifest: tests/appsec/test_service_activation_metric.py::TestServiceActivationRemoteConfigurationConfigMetric: missing_feature tests/appsec/test_shell_execution.py::Test_ShellExecution: v0.95.0 tests/appsec/test_shell_execution.py::Test_ShellExecution::test_truncate_1st_argument: bug (APPSEC-55673) - tests/appsec/test_span_tags_headers.py: v1.17.0-dev + tests/appsec/test_span_tags_headers.py: + - weblog_declaration: + "*": v1.17.0-dev + php-fpm-7.0: missing_feature (Needs configuring apache to send length) + php-fpm-7.1: missing_feature (Needs configuring apache to send length) + php-fpm-7.2: missing_feature (Needs configuring apache to send length) + php-fpm-7.3: missing_feature (Needs configuring apache to send length) + php-fpm-7.4: missing_feature (Needs configuring apache to send length) + php-fpm-8.0: missing_feature (Needs configuring apache to send length) + php-fpm-8.1: missing_feature (Needs configuring apache to send length) + php-fpm-8.2: missing_feature (Needs configuring apache to send length) tests/appsec/test_suspicious_attacker_blocking.py::Test_Suspicious_Attacker_Blocking: v1.13.0+4663b2fa7c20c6920f347d059b57dc2a419cb7f7 tests/appsec/test_trace_tagging.py::Test_TraceTaggingRules: v1.12.0 tests/appsec/test_trace_tagging.py::Test_TraceTaggingRulesRcCapability: v1.12.0 From d0d5a1523416d14ee020a07c0e5994ad243ed4a2 Mon Sep 17 00:00:00 2001 From: Alejandro Estringana Ruiz Date: Wed, 25 Feb 2026 13:36:08 +0100 Subject: [PATCH 3/4] Enable header tests on FPM --- manifests/php.yml | 12 +----------- utils/build/docker/php/php-fpm/php-fpm.conf | 4 ++++ 2 files changed, 5 insertions(+), 11 deletions(-) diff --git a/manifests/php.yml b/manifests/php.yml index 789105bad0a..f6476847e03 100644 --- a/manifests/php.yml +++ b/manifests/php.yml @@ -392,17 +392,7 @@ manifest: tests/appsec/test_service_activation_metric.py::TestServiceActivationRemoteConfigurationConfigMetric: missing_feature tests/appsec/test_shell_execution.py::Test_ShellExecution: v0.95.0 tests/appsec/test_shell_execution.py::Test_ShellExecution::test_truncate_1st_argument: bug (APPSEC-55673) - tests/appsec/test_span_tags_headers.py: - - weblog_declaration: - "*": v1.17.0-dev - php-fpm-7.0: missing_feature (Needs configuring apache to send length) - php-fpm-7.1: missing_feature (Needs configuring apache to send length) - php-fpm-7.2: missing_feature (Needs configuring apache to send length) - php-fpm-7.3: missing_feature (Needs configuring apache to send length) - php-fpm-7.4: missing_feature (Needs configuring apache to send length) - php-fpm-8.0: missing_feature (Needs configuring apache to send length) - php-fpm-8.1: missing_feature (Needs configuring apache to send length) - php-fpm-8.2: missing_feature (Needs configuring apache to send length) + tests/appsec/test_span_tags_headers.py: v1.17.0-dev tests/appsec/test_suspicious_attacker_blocking.py::Test_Suspicious_Attacker_Blocking: v1.13.0+4663b2fa7c20c6920f347d059b57dc2a419cb7f7 tests/appsec/test_trace_tagging.py::Test_TraceTaggingRules: v1.12.0 tests/appsec/test_trace_tagging.py::Test_TraceTaggingRulesRcCapability: v1.12.0 diff --git a/utils/build/docker/php/php-fpm/php-fpm.conf b/utils/build/docker/php/php-fpm/php-fpm.conf index 47e2bffb185..b5163539de7 100644 --- a/utils/build/docker/php/php-fpm/php-fpm.conf +++ b/utils/build/docker/php/php-fpm/php-fpm.conf @@ -6,6 +6,10 @@ SetEnvIfNoCase ^Authorization$ "(.+)" HTTP_AUTHORIZATION=$1 + # Trust Content-Length header from PHP-FPM instead of converting to chunked encoding + # See: https://github.com/apache/httpd/blob/trunk/modules/proxy/mod_proxy_fcgi.c + # mod_proxy_fcgi strips Content-Length by default; this preserves it + SetEnv ap_trust_cgilike_cl 1 RewriteEngine on ProxyErrorOverride on 404 # Disable ProxyErrorOverride for endpoint_fallback.php to avoid duplicate traces From 5a2dc2d1208d509d2b7f4fa13ecf8448f5be7314 Mon Sep 17 00:00:00 2001 From: Alejandro Estringana Ruiz Date: Wed, 25 Feb 2026 14:48:07 +0100 Subject: [PATCH 4/4] Fix failing test --- utils/build/docker/php/common/headers.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/utils/build/docker/php/common/headers.php b/utils/build/docker/php/common/headers.php index 11146bd8141..9ea0c951769 100644 --- a/utils/build/docker/php/common/headers.php +++ b/utils/build/docker/php/common/headers.php @@ -1,6 +1,5 @@ \ No newline at end of file