﻿id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
34519	Don't send content in responses to HEAD requests	James Pic	nobody	"Responses to HEAD requests must not send content as per RFC9110

> 9.3.2. HEAD
> The HEAD method is identical to GET except that the server MUST NOT send content in the response. 

https://www.rfc-editor.org/rfc/rfc9110.html#name-head

Currently, Django sends content in response to HEAD requests.

Django *MUST NOT* send content in response for HEAD requests.

Demonstration:

{{{
$ django-admin startproject test
$ cd test && ./manage.py runserver
# tcpdump -vv -s0 -A -i lo port 8000 &> tcpdump.txt
$ curl -I localhost:8000
}}}

tcpdump.txt attached, it shows Django sends content in the HEAD response"	Bug	closed	Uncategorized	4.2	Normal	duplicate			Unreviewed	0	0	0	0	1	0
