https://eol.org/pages/52 displays 404 page, but returns a 200 OK http code #37
Description
To reproduce:
$ curl -L -v https://eol.org/pages/52
expected: a 404 error page with a http result code 404.
actual: a 404 error page with a http code 200
verbose logging:
* Trying 160.111.248.42...
* Connected to eol.org (160.111.248.42) port 443 (#0)
* found 148 certificates in /etc/ssl/certs/ca-certificates.crt
* found 596 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256
* server certificate verification OK
* server certificate status verification SKIPPED
* common name: eol1.eol.org (matched)
* server certificate expiration date OK
* server certificate activation date OK
* certificate public key: RSA
* certificate version: #3
* subject: C=US,ST=District of Columbia,L=Washington,O=Smithsonian Institution,CN=eol1.eol.org
* start date: Thu, 19 Oct 2017 14:54:46 GMT
* expire date: Mon, 10 Feb 2020 15:24:44 GMT
* issuer: C=US,O=Entrust\, Inc.,OU=See www.entrust.net/legal-terms,OU=(c) 2012 Entrust\, Inc. - for authorized use only,CN=Entrust Certification Authority - L1K
* compression: NULL
* ALPN, server accepted to use http/1.1
> GET /pages/52 HTTP/1.1
> Host: eol.org
> User-Agent: curl/7.47.0
> Accept: */*
>
< HTTP/1.1 302 Found
< Date: Fri, 16 Aug 2019 19:48:14 GMT
< Content-Type: text/html; charset=utf-8
< Content-Length: 85
< Connection: keep-alive
< X-Frame-Options: ALLOWALL
< Location: https://eol.org/404
< Cache-Control: no-cache
< X-Request-Id: a050d809-1a74-4cb9-a3c1-06b75294834b
< X-Runtime: 0.011665
< Age: 0
< X-Cache: MISS
< X-Cache-Hits: 0
<
* Ignoring the response-body
* Connection #0 to host eol.org left intact
* Issue another request to this URL: 'https://eol.org/404'
* Found bundle for host eol.org: 0x55a046d97f20 [can pipeline]
* Re-using existing connection! (#0) with host eol.org
* Connected to eol.org (160.111.248.42) port 443 (#0)
> GET /404 HTTP/1.1
> Host: eol.org
> User-Agent: curl/7.47.0
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Fri, 16 Aug 2019 19:48:14 GMT
< Content-Type: text/html
< Content-Length: 1564
< Connection: keep-alive
< Last-Modified: Fri, 26 May 2017 20:32:27 GMT
< Age: 0
< X-Cache: MISS
< X-Cache-Hits: 0
< Accept-Ranges: bytes
<
<!DOCTYPE html>
<html>
<head>
<title>The page you were looking for doesn't exist (404)</title>
<meta name="viewport" content="width=device-width,initial-scale=1">
<style>
body {
background-color: #EFEFEF;
color: #2E2F30;
text-align: center;
font-family: arial, sans-serif;
margin: 0;
}
div.dialog {
width: 95%;
max-width: 33em;
margin: 4em auto 0;
}
div.dialog > div {
border: 1px solid #CCC;
border-right-color: #999;
border-left-color: #999;
border-bottom-color: #BBB;
border-top: #B00100 solid 4px;
border-top-left-radius: 9px;
border-top-right-radius: 9px;
background-color: white;
padding: 7px 12% 0;
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
}
h1 {
font-size: 100%;
color: #730E15;
line-height: 1.5em;
}
div.dialog > p {
margin: 0 0 1em;
padding: 1em;
background-color: #F7F7F7;
border: 1px solid #CCC;
border-right-color: #999;
border-left-color: #999;
border-bottom-color: #999;
border-bottom-left-radius: 4px;
border-bottom-right-radius: 4px;
border-top-color: #DADADA;
color: #666;
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
}
</style>
</head>
<body>
<!-- This file lives in public/404.html -->
<div class="dialog">
<div>
<h1>The page you were looking for doesn't exist.</h1>
<p>You may have mistyped the address or the page may have moved.</p>
</div>
<p>If you are the application owner check the logs for more information.</p>
</div>
</body>
</html>
* Connection #0 to host eol.org left intact