ccampbell/chromelogger

HTTP 500 error when the SSL is missing

davidkunz opened this issue · 2 comments

davidkunz commented

Hey there,
In a project which is running fine without ChromePhp, I'm getting an error 500 'Premature end of script headers' when including the class and calling the log()-method.
This error seems to occur only on sites without a valid SSL certificate (either via http or https when forcing to accept the invalid/missing certificate).
When I use the same code base on a domain with a valid SSL, no error is returned, the site displays as expected and the console logging is also okay.

This occurs both in Firefox and Chrome (latest versions).

Is this a know issue, and is there a fix available?

davidkunz commented

Is this project still maintained, or can we better move on to an alternative which is offering support?

ccampbell commented

Hi @davidkunz. It hasn’t been updated in a while for sure, but I wouldn’t say it is abandoned either. I have just been busy with other things.

I think this is an issue with the PHP server itself and not with this extension or the ChromePHP library. I just did some googling and found

Unfortunately I can’t really help debug that more. All the log() call in ChromePHP does is set a custom header. I would imagine you should be able to reproduce this problem by trying to set a very large header value on its own:

header('X-SomeHeader: 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');

That is just some base64 encoded lorem ipsum text. I am not sure if that will reproduce it, but if you play around with different header values I suspect you will. I hope this helps!