[Django] #22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the media folder

Django

unread,

Jun 25, 2014, 9:50:00 AM6/25/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new
Component: File | Version: 1.5
uploads/storage | Keywords: staticfiles HEAD
Severity: Normal | request HTTP
Triage Stage: Unreviewed | Has patch: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
I have some Javascript code in a django app that performs a HEAD request
on a file to test if it exists. This file is in the media folder of the
standard static files setup in development.

However, django returns an HTTP 200 code regardless of whether the file
exists or not. Expected behaviour is that it should return a 404 when the
file does not exist.

GET requests return a 404 as expected.

--
Ticket URL: <https://code.djangoproject.com/ticket/22904>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

Django

unread,

Jun 25, 2014, 9:58:25 AM6/25/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new
Component: File | Version: 1.5

* needs_better_patch: => 0
* needs_tests: => 0
* needs_docs: => 0

Comment:

I can't reproduce this. How are you serving content in the media folder? I
tested using [https://docs.djangoproject.com/en/1.6/howto/static-files
/#serving-files-uploaded-by-a-user-during-development static()] and saw
the following in the development server logs:

`[25/Jun/2014 13:56:21] "HEAD /media/foo HTTP/1.1" 404 0`

after running:

`$ curl -i -X HEAD http://localhost:8000/media/foo`

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:1>

Django

unread,

Jun 26, 2014, 11:09:33 AM6/26/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new
Component: File | Version: 1.5

Comment (by Steve Gilroy <shtev@…>):

media folder is set up as

STATICFILES_STORAGE = 'require.storage.OptimizedStaticFilesStorage'
CHECKOUT_ROOT = os.path.abspath(os.path.join(PROJECT_ROOT, '..'))
MEDIA_URL = '/media/'
MEDIA_ROOT = os.path.join(CHECKOUT_ROOT, 'var', 'media')

this could imply an issue with django-require

Django version is 1.5.8

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:2>

Django

unread,

Jun 26, 2014, 11:16:10 AM6/26/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new
Component: File | Version: 1.5

Comment (by Steve Gilroy <shtev@…>):

I have tested this with
STATICFILES_STORAGE='django.contrib.staticfiles.storage.StaticFilesStorage'
and still see the same issue

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:3>

Django

unread,

Jun 26, 2014, 11:17:41 AM6/26/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new
Component: File | Version: 1.5

Comment (by Steve Gilroy <shtev@…>):

and I get the 200 with curl as well as Javascript

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:4>

Django

unread,

Jun 26, 2014, 11:28:09 AM6/26/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new
Component: File | Version: 1.5

Comment (by Steve Gilroy <shtev@…>):

I realised the problem is that when DEBUG=True is in settings, I am
getting a 200, and the content is the standard text reply, rather than a
proper 404.

Should this still apply to the media directory though?

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:5>

Django

unread,

Jun 26, 2014, 11:47:13 AM6/26/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new
Component: File | Version: 1.5

Comment (by timo):

What do you mean by "the standard text reply"? What view is returning the
response?

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:6>

Django

unread,

Jun 26, 2014, 3:50:12 PM6/26/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new
Component: File | Version: 1.5

Comment (by aaugustin):

I suspect Steve's seeing the yellow debug view.

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:7>

Django

unread,

Jun 26, 2014, 4:07:28 PM6/26/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new
Component: File | Version: 1.5

Comment (by timo):

Attached is what I see on a GET in a browser.

And with curl:
{{{

$ curl -i -X HEAD http://localhost:8000/media/foo

HTTP/1.0 404 NOT FOUND
Date: Thu, 26 Jun 2014 20:02:00 GMT
Server: WSGIServer/0.1 Python/2.7.3
X-Frame-Options: SAMEORIGIN
Content-Type: text/html
}}}

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:8>

Django

unread,

Jun 28, 2014, 10:12:11 AM6/28/14

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody

Type: Bug | Status: closed
Component: File | Version: 1.5
uploads/storage | Resolution: needsinfo

Changes (by timo):

* status: new => closed
* resolution: => needsinfo

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:9>

Django

unread,

May 31, 2015, 6:16:28 AM5/31/15

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new

Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------

Changes (by jrief):

* status: closed => new
* version: 1.5 => 1.7
* resolution: needsinfo =>

Comment:

I also can replicate this bug. It happens on Django version 1.6 and 1.7. I
haven't tested with 1.8 yet.

In order to repeat you have to use any URL in the {{{/media/...}}} path
**AND** the sessionid must be from a logged in staff user.

{{{
$ curl --head --cookie sessionid=<valid-session-id-of-staff-user>
http://localhost:8000/media/path-to-non-exiting-file
HTTP/1.0 200 OK

$ curl --include --cookie sessionid=<valid-session-id-of-staff-user>
http://localhost:8000/media/path-to-non-exiting-file
HTTP/1.0 404 NOT FOUND

$ curl --head --cookie sessionid=<invalid-session-id>
http://localhost:8000/media/path-to-non-exiting-file
HTTP/1.0 404 NOT FOUND

$ curl --head http://localhost:8000/media/path-to-non-exiting-file
HTTP/1.0 404 NOT FOUND

$ curl --head --cookie sessionid=<valid-session-id-of-staff-user>
http://localhost:8000/static/path-to-non-exiting-file
HTTP/1.0 404 NOT FOUND
}}}

what we see here is, that only the first invocation of **curl** delivers
an unexpected result. All others are correct.

Of course this only happens with {{{DEBUG = True}}} and while delivering
media files through Django. Otherwise we'd have to blame Apache or NGiNX.

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:10>

Django

unread,

May 31, 2015, 6:33:07 AM5/31/15

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody
Type: Bug | Status: new

Needs tests: 0 | Patch needs improvement: 0

Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------

Comment (by timgraham):

Could you upload a sample project that can be used to reproduce the error?
I tried with the stable/1.7.x branch using curl, but still get a 404 even
on the first request.

--
Ticket URL: <https://code.djangoproject.com/ticket/22904#comment:11>

Django

unread,

Jun 1, 2015, 6:26:21 AM6/1/15

to django-...@googlegroups.com

#22904: Django returns an HTTP 200 on a HEAD request for a non-existing file in the
media folder
-------------------------------------+-------------------------------------
Reporter: sHtev | Owner: nobody

Type: Bug | Status: closed

Component: File | Version: 1.7
uploads/storage |

Severity: Normal | Resolution: needsinfo

Keywords: staticfiles HEAD | Triage Stage:
request HTTP | Unreviewed
Has patch: 0 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0

Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------