HTTP header fields are components of the message header of requests and responses in the Hypertext Transfer Protocol (HTTP). They define the operating parameters of an HTTP transaction.

learn more… | top users | synonyms

0
votes
0answers
34 views

mod_headers not working in .htaccess

I'm trying to migrate the websites of a client to a new server. The old one was running mod_php 5.2 and apache 2.2, and the new one is running apache 2.4 and php 5.2 in cgi mode (the idea being to ...
0
votes
0answers
16 views

IIS server farm with ARR: Why does HTTP_X_FORWARDED_FOR have a port number?

I've got a server farm set up in IIS 8.5. When I inspect the HTTP_X_FORWARDED_FOR header in my application code, it gives me the correct IP address but it contains a colon and a port number. E.g. ...
-1
votes
0answers
23 views

Keep Referer Information in Reverse Proxy [on hold]

I have one Apache Http making reverse proxy to service that is running other server in NGINX. The service running in the second server need to get the referer and other information from the public ...
0
votes
0answers
18 views

Remove server header from IIS 8.5

I have IIS 8.5 installed on my Windows server 2012 R2. I am trying to remove the Server: Microsoft-IIS/8.5 header from my responses. I tried installed URLScan but it fails to install with the ...
0
votes
0answers
3 views

Windows caches 403 machine-wide? [migrated]

In all honesty, I have no idea how to formulate this question, it's the weirdest thing I've ever encountered. When developing a website on an external VPS and I encounter on my desktop a 403 or 404 ...
0
votes
0answers
22 views

Apache2: How to log the entire status line (including reason phrase)?

Apache logs the status code of the response if %s is in the log format, but I also need to log the reason phrase (the text to the right of the status code). How can I get Apache2 to log the entire ...
2
votes
0answers
51 views

Set CORS headers on nginx

Addresses like http://vpsxxx.ovh.net/g/search?q=ok or http://vpsxxx.ovh.net/so/questions/34738694/how-to-move-items-on-the-screen-for-a-game-using-javascript are proxied well, when trying them from ...
1
vote
0answers
70 views

Access-Control-Allow-Origin header missing from a response

I'm trying to debug an issue. On one of my sites, the font files are not loading correctly. Someone has reported this error in the inspector log: Font from origin ...
1
vote
0answers
30 views

Nginx - Wrong Response Header

when installing joomla I face an issue realated to response header. During the installation process, an ajax post request send to server which in response status is 303 instead of 200 ! so ajax ...
0
votes
0answers
19 views

IIS vs Apache - diferent handling of redirect to self

I have a site that forwards all requests to a single php file. In my php code, i have a logout function that fires when the REQUEST_URI is /logout, that destroys the session and then redirects to /. ...
1
vote
0answers
28 views

host header change upstream servers nginx

I have following config in my config file upstream static { server server1.dom.com; server server2.dom.com; } server { listen 80; server name dom.com; location ^~ /images/ { ...
2
votes
1answer
63 views

Add haproxy response header based on request header

I have a Haproxy instance that rewrites Host headers to internal ones using http-request set-header. http-request set-header Host internal.example However, I'd still like backends to have access to ...
1
vote
1answer
27 views

How to deny requests that contains a certain header and not coming from whitelisted IPs in nginx?

I would like to double protect an application that uses a custom header to authorize some critical views. Since those calls should only originate from some well-known IPs, I would like to block ...
0
votes
0answers
90 views

Remove double content-length header

Server configuration: CentOS 7, Apache 2.4.18, PHP 5.6.16, NginX 1.8.0 as reverse proxy, mod_security and rules latest version and DirectAdmin 1.49.1. The problem is: mod_security is adding double ...
0
votes
1answer
29 views

What is simple way to ensure that HTTP request with some specific header come only from a specific IP only?

My web application run on Centos6. I want to protect my application. I want to ensure that HTTP request with some specific header come only from a specific IP only. (The header include a user name ...
0
votes
1answer
113 views

Nginx - Allow requests without a Host header

When Nginx receives a request that's missing the Host header, it rejects it with a 400 response. As it should. Is there any way around this? There is a piece of hardware that needs to be able to ...
1
vote
2answers
129 views

HAProxy rspadd or set-header

I am currently trying to improve my HAProxy HTTPS configuration. There seems to be two ways to set additional fields to response headers in HAProxy. I currently use http-response set-header, which ...
1
vote
1answer
88 views

Access to Proxy Protocol address within HAProxy

I am running HAProxy that is receiving layer 4 proxy protocol from an upstream source. I have a need to create a custom HTTP header with the address contained there. I can't seem to find how I can ...
1
vote
0answers
57 views

nginx force http header overwrite

We had some misplaced http headers on our sites set up for around one day which creates problems on some of our subdomains. Resolving this fault is pretty hard because the headers we sent are valid ...
1
vote
1answer
55 views

How to stop tinyproxy from using “Proxy-Connection” header

I just setup tinyproxy for the first time, and I'm trying to make it mimic a normal connection as closely as possible. I already disabled the Via header, but I'm not sure how to change the ...
0
votes
1answer
18 views

Can we log the `Accept-Encoding` field in request when using nginx?

I've read ngx_http_core_module#variables, however I cannot find the Accept-Encoding field.
0
votes
1answer
29 views

Which domain-name was requested? Running virtual hosts on Mongoose web server

I'm currently running Mongoose WebServer 5.5 on Windows 7 I have a number of virtual hosts, running on a single Mongoose server on one IP node. The access log entries are typically 157.55.39.146 - ...
0
votes
0answers
11 views

Forward Remote_addr across Apache and OHS

I am attempting a hosting site with weblogic listening behine OHS and Apache. I am able to retain the remote_addr on apache using remote_ip but not able to carry it forward to OHS. I can share ...
0
votes
0answers
43 views

Serve growing audio file with Apache

I'm trying to play a growing audio file on my website and I don't know how Apache should be configured for this task. I read that I need to send a status code 206 (Partial Content). This is done by ...
0
votes
1answer
54 views

apache2 - Why caching of a static file is not happening?

I am working on to cache static files in a SugarCRM environment, which is not happening as I would like to. I have narrowed it to one specific case, and I would like to know why this is so. On the ...
1
vote
0answers
42 views

Printing origin servers name in Apache log

I have configured a reverse proxy setup with Apache as the reverse proxy server and JBoss nodes as origin servers. How do i get the name of origin servers logged in to Apache log. I don't see any ...
0
votes
0answers
255 views

Nginx CORS – Access-Control-Allow-Origin Header not added

I am struggling to get CORS header added to barely any file. I know the if statement might causes nginx to behave wired (http://wiki.nginx.org/IfIsEvil) but I haven't found another approach. Using ...
0
votes
1answer
80 views

Logging response headers in Apache reverse proxy without sending them to the client

We use serveral Apache servers as reverse proxy in front of numerous backend servers. The backend servers send a HTTP response header ("Cast") which contains an internal name of the backend server. ...
0
votes
0answers
125 views

Haproxy don't capture added header

I can add new header in haproxy with the "http response add-header" function and it's done successfully because i can see those added headers in my http packet when i use Wireshark. The problem is ...
0
votes
1answer
45 views

On-the-fly decoding HTTP bodies on Linux?

My wish is to monitor HTTP exchanges between my server and a browser. At present time, I use the localhost because I'm developping the app. I installed and used tcpflow and found it quite useful but ...
0
votes
0answers
42 views

Differing if-modified-since headers in IE and Firefox/Chrome

Strangely IE always requests the same non-changed images from my webserver although it should have cached them. In fact Firefox and Chrome (also Opera fyi) do cache these resources. For example ...
0
votes
2answers
302 views

nginx : add_header directive not working

My Issue: nginx add_header directive doesn't appear to be working What I have tried: In my nginx conf I have this: location ~* \.(ttf|woff|eot|otf|woff2|svg|svgz)$ { access_log ...
0
votes
1answer
50 views

Truncate Basic authentication username and password in Apache proxy

We need to proxy a request to a server. The sender has an autogenerated username and password, and will use basic authentication. We can't change these how these are generated by the sender. The ...
0
votes
1answer
352 views

How do I capture unique id in haproxy logs?

I'm trying to capture the unique id for each request in my logs. I thought I could use capture request header X-Unique-ID len 16 on the header but its not working. Any suggestions? global log ...
0
votes
0answers
61 views

How to troubleshoot an invalid cached response

I've a Google Cloud Engine instance with Suse Linux 13.2 with original network config and without any configured proxy. And I've a problem with an invalid CACHED response I receive from a server. ...
1
vote
2answers
249 views

How to replace the host variable in a header in nginx

I am trying to replace the host variable in the header in nginx configuration, such that some.random.sub.example.net becomes net-some.random.sub.example.com. i have tried the following : if ($host ~* ...
2
votes
1answer
146 views

Can I compare a variable set by auth_request_set after the auth_request has returned in nginx?

I've got a location block with an auth_request like this location /somepath { auth_request /authorize; auth_request_set $header_variable $upstream_http_custom_header; proxy_path ...
1
vote
1answer
126 views

Apache 2.4.16 Response Header value clipped

Problem: The value of a Response Header is greater than 8K and always clipped. Server Config: Apache 2.4.16-x64 with mod_proxy and mod_proxy_http / Running on Windows Server 2012 Httpd.conf: ...
3
votes
0answers
207 views

Apache Header Module Loaded but can't set headers in htaccess

I have Apache 2.2.29 (unix) setup and running on my new dev machine (mac). I am trying to set CORS headers for an API project - something that I have done many times. The htaccess file for the ...
0
votes
0answers
149 views

font-awesome not displaying on Nginx, Rails 4, mina/puma

I made some changes to the nginx config file and I now cannot see any of the font-awesome fonts on FF and Chrome. The fonts are precompiled and in this directory: ...
2
votes
1answer
735 views

is there a standard for chaining x-forwarded-for headers?

IETF RFC 2616 Section 4.2 allows a request to contain multiple headers with the same field-name as long as chronological order of insertion is preserved and their values can be converted into single ...
0
votes
1answer
58 views

Protocol-relative URL in CSS file is being overwritten

I have this code: <?php header('Content-Type: text/css; charset=utf-8'); ?> a.logo{background:url(//webzina.net/img/logo.png) no-repeat 100% 0} Locally (PHP Version 5.3.5), I get: ...
1
vote
1answer
32 views

Calculate HTTP Digest

I am just trying to calculate the response for an HTTP Digest Authentication. Imagine the example from RFC2617. I extracted the folling variables: USER="Mufasa" REALM="testrealm@host.com" ...
0
votes
0answers
5 views

What cache control headers will prevent revalidation? [duplicate]

I'm trying to set cache control headers on a /static/ directory such that browsers will use a cached copy of the file without revalidating it. Links to files in this directory include the timestamp ...
5
votes
0answers
798 views

How can the x-frame-options HTTP header of ADFS 3 be manipulated?

By default, ADFS 3 responses contain the "X-Frame-Options: DENY" HTTP header. This prevents ADFS from being run in an iframe, because this presents an opportunity for clickjacking attacks. At the ...
0
votes
0answers
32 views

How to make this pound config work

I'm trying to have pound match on the Host header, and then modify the header before making the request. Something like: Service HeadRequire "Host: company.something.com" HeadRemove "Host" ...
1
vote
1answer
507 views

Included rewrite rules not matched

With Apache, I'm trying to set up a rewrite rule which will be included in several virtual hosts. Actually, this rule file is included in 2 vhost. The first vhost contains only this rewrite rule (and ...
5
votes
2answers
179 views

apache: Send request URI within HTTP header for static files

To fulfil the requirements of the PubSubHubbub 0.4 spec, I have to send a rel=self header for each file. I'm now trying to do that with Apache's mod_headers and environment variables: Header append ...
1
vote
1answer
56 views

Is Strict-Transport-Security HTTP header name case-sensitive?

I'm digging into the HTTP Strict-Transport-Security specification, https://tools.ietf.org/html/rfc6797 It specifies the syntax of the header like this: Strict-Transport-Security: max-age=15768000 ; ...
1
vote
1answer
412 views

How can the HSTS header be added to WebLogic?

Is there an implementation for using the Strict-Transport-Security header to WebLogic? I figure it would be using something in web.xml under <security-constraint> I know how to do this for an ...