HTTP header fields are components of the message header of requests and responses in the Hypertext Transfer Protocol (HTTP). They define the operating parameters of an HTTP transaction.

learn more… | top users | synonyms

0
votes
2answers
34 views

How do i configure nginx to use part of a URL as a header?

I am trying to get a server application running which supports multiple customers. They should each access the app with their own URL, e.g. http://localhost:8082/customer1/config, but the application ...
0
votes
0answers
10 views

Apache Revese Proxy is not cached

I have the below config so all requests to /j/* will be proxied, however why not being cached as told ? Its on windows 2012 and apache 2.4.20 . Thanks ProxyPassMatch "^/j/(.*)$" ...
1
vote
1answer
23 views

How is Cache-Control: max-age affected by intermediate caching?

I am currently serving an HTML page to users with a Cache-Control: max-age=600 header. I believe this allows the users' browsers to cache the page for a maximum of 10 minutes. I am considering adding ...
0
votes
1answer
12 views

<RequireAll> / Require expr equivalent in Apache 2.2.22 to check for headers?

I use the following Apache config to to check for certain headers in my requests: <LocationMatch /test-headers/> <RequireAll> Require expr %{HTTP:header1} == 'abc' ...
0
votes
1answer
12 views

Non proxy aware client, (mitm)proxy modification of headers

What I am trying to achive Pulling data, using a SaaS service, from a remote site with a simple GET request to mitmproxy. The SaaS service is not proxy aware. I want the SaaS web client to do a GET ...
0
votes
0answers
45 views

no apache http headers with php5-fpm

I've migrated from standard fastCGI to php5-fpm. Now all headers that are set via Apache (mod_expires, mod_header, and so on) are being discarded (or not set, resp.). For example, I need to parse ...
0
votes
0answers
13 views

Apache Doesn't Unset Headers

We have apache 2.4 with the headers mod enabled. We have two identical VirtualHosts, but the X-Frame-Options header gets set for one site and not the other when unconfigured (tested on both Chrome and ...
1
vote
0answers
14 views

Cookie Secure Flag not persistent

I'm trying to implement a Secure flag for all cookies. I'm doing this via Headers. Here's how I did it: Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4" It ...
1
vote
0answers
39 views

nginx is ignoring root location header (location /)

I have self-compiled nginx 1.9.14 with http2 support: nginx version: nginx/1.9.14 built by gcc 4.9.2 (Debian 4.9.2-10) built with OpenSSL 1.0.1k 8 Jan 2015 TLS SNI support enabled So I have a ...
2
votes
0answers
70 views

HSTS exclude specific subdomain with “includeSubdomains”

I'm using HSTS with this header on my website: Strict-Transport-Security: max-age=15768000; includeSubDomains This works as intended and forces the browser to redirect all http connections to ...
1
vote
1answer
27 views

500 Error: “End of script output before headers” - Simple script within Wordpress theme

I have a multi-site install of Wordpress running fine on a unmanaged CentOS server, however for a certain feature I need to do my own thing on certain pages and manually interact with some ...
0
votes
1answer
16 views

Apache 'always set' headers removed if mod_expires ExpiresActive On

I have a following directives in my virtual host: Header always set Strict-Transport-Security "max-age=157700000;" Header always set ThisIsATestHeader "This is removed when ever ExpiresActive is on" ...
0
votes
1answer
20 views

Proxy to add CORS headers with netcat

I'm looking for a little script using nc which will be used to add CORS headers (at least Access-Control-Allow-Origin: *) in order for my local ionic dev application to access a remote webservice.
1
vote
0answers
57 views

Very long useragent

We have requests in our server log with a very long useragent: HEADER: user-agent=Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0; WUID=4bddaa48430e60af6132822cd6fab6c4; WTB=2873; ...
1
vote
0answers
103 views

How do I allow users to override X-Frame-Options when using Apache + PHP-FPM?

I have an Ubuntu 14.04 server running Apache + PHP-FPM + FastCGI, serving user home pages. For security, I have enabled in Apache's configuration: Header set X-Content-Type-Options: "nosniff" Header ...
0
votes
0answers
73 views

Configure Apache DirectorySlash to honor X-Forwarded-Host set by load balancer

Is there a way to configure the DirectorySlash behavior of Apache to honor the X-Forwarded-Host header set by a load balancer? For example, assume my load balancer host is example.com but it forwards ...
0
votes
1answer
24 views

Content security policy: blocked uri “about”

I am implementing Content security policy to my website headers. I currently have it on report-only setting for testing. My server is Apache 2.4.7. After setting up some policies I keep seeing ...
0
votes
1answer
46 views

Haproxy rules(set-header) not working and it's not changing base url of request

I am trying to integrate cloud foundry adminui application. Url which I access is https://myexample.com/adminui/ It works as follows: Request https://myexample.com/adminui/ Response ...
1
vote
0answers
11 views

Negative impact of setting Apache's LimitRequestFieldSize very high?

On apache httpd 2.2, I would like to increase the value of LimitRequestFieldSize to 48k or maybe even 65k. Has anyone experience with setting the value of LimitRequestFieldSize to such high values? ...
1
vote
0answers
44 views

ColdFusion fails to include custom HTTP response header set in IIS 8.5

I have a Windows 2012 R2 server running IIS 8.5 and ColdFusion 11. Under a specific directory ("mydirectory") I added an HTTP Response Header (Name: X-ResponseHeader, Value: Test). The resulting ...
0
votes
0answers
22 views

Ping request timed out when basehttpserver is loading website

I am running a website using basehttpserver. 10.0.xx.xx is the ip to access the site. There is a 'controller' with a cellular modem on it, which hosts the website and runs the basehttpserver. When ...
2
votes
1answer
105 views

Is there a response header which indicates an old IP?

I have a website which has recently migrated to a new server. The old server has a proxy_pass in place in the nginx config to ensure any requests that land there due to old DNS get routed to the new ...
1
vote
0answers
107 views

How to pass GeoIP HTTP request headers to backend with Apache?

I am using nginx to proxy HTTP requests to a PHP application running in the scope of Apache 2.4 (mod_php5) within a Docker container (cbeer/piwik). ...
2
votes
1answer
54 views

$sent_http_ variables disappear in Nginx in some circumstances

I face a strange issue with Nginx. This is a minimal config that reproduce the error: server { server_name mydomain.com; listen 111.111.111.111:80; root ...
0
votes
2answers
34 views

Strip Tomcat Headers With Apache, then Cache Resources To Disk?

I've got mod_disk_cache working great in Apache. It's caching some of the requests coming out of Tomcat. But for various reasons I won't go into, we can't get Tomcat to drop the Expires and ...
0
votes
0answers
29 views

How to insert a CAS authentication header in the reply?

I use mod_auth_cas to authorize access to selected Location: <Location /> Authtype CAS AuthGroupFile /var/source/groups require valid-user </Location> Is there a ...
0
votes
0answers
133 views

mod_headers not working in .htaccess

I'm trying to migrate the websites of a client to a new server. The old one was running mod_php 5.2 and apache 2.2, and the new one is running apache 2.4 and php 5.2 in cgi mode (the idea being to ...
0
votes
1answer
65 views

IIS server farm with ARR: Why does HTTP_X_FORWARDED_FOR have a port number?

I've got a server farm set up in IIS 8.5. When I inspect the HTTP_X_FORWARDED_FOR header in my application code, it gives me the correct IP address but it contains a colon and a port number. E.g. ...
0
votes
1answer
357 views

Remove server header from IIS 8.5

I have IIS 8.5 installed on my Windows server 2012 R2. I am trying to remove the Server: Microsoft-IIS/8.5 header from my responses. I tried installed URLScan but it fails to install with the ...
0
votes
0answers
27 views

Apache2: How to log the entire status line (including reason phrase)?

Apache logs the status code of the response if %s is in the log format, but I also need to log the reason phrase (the text to the right of the status code). How can I get Apache2 to log the entire ...
2
votes
0answers
134 views

Set CORS headers on nginx

Addresses like http://vpsxxx.ovh.net/g/search?q=ok or http://vpsxxx.ovh.net/so/questions/34738694/how-to-move-items-on-the-screen-for-a-game-using-javascript are proxied well, when trying them from ...
1
vote
0answers
181 views

Access-Control-Allow-Origin header missing from a response

I'm trying to debug an issue. On one of my sites, the font files are not loading correctly. Someone has reported this error in the inspector log: Font from origin ...
1
vote
1answer
81 views

Nginx - Wrong Response Header

when installing joomla I face an issue realated to response header. During the installation process, an ajax post request send to server which in response status is 303 instead of 200 ! so ajax ...
0
votes
0answers
62 views

IIS vs Apache - diferent handling of redirect to self

I have a site that forwards all requests to a single php file. In my php code, i have a logout function that fires when the REQUEST_URI is /logout, that destroys the session and then redirects to /. ...
2
votes
1answer
46 views

Custom headers (mod_headers) not showing in combination with mod_rewrite

I have a vhost with multiple domainnames linked to it. I'm trying to send additional headers when a request is made to one particular domainname. Here's what I'm doing (tried both in the vhost as in ...
1
vote
0answers
54 views

host header change upstream servers nginx

I have following config in my config file upstream static { server server1.dom.com; server server2.dom.com; } server { listen 80; server name dom.com; location ^~ /images/ { ...
2
votes
1answer
179 views

Add haproxy response header based on request header

I have a Haproxy instance that rewrites Host headers to internal ones using http-request set-header. http-request set-header Host internal.example However, I'd still like backends to have access to ...
1
vote
1answer
37 views

How to deny requests that contains a certain header and not coming from whitelisted IPs in nginx?

I would like to double protect an application that uses a custom header to authorize some critical views. Since those calls should only originate from some well-known IPs, I would like to block ...
0
votes
1answer
33 views

What is simple way to ensure that HTTP request with some specific header come only from a specific IP only?

My web application run on Centos6. I want to protect my application. I want to ensure that HTTP request with some specific header come only from a specific IP only. (The header include a user name ...
0
votes
1answer
295 views

Nginx - Allow requests without a Host header

When Nginx receives a request that's missing the Host header, it rejects it with a 400 response. As it should. Is there any way around this? There is a piece of hardware that needs to be able to ...
1
vote
2answers
314 views

HAProxy rspadd or set-header

I am currently trying to improve my HAProxy HTTPS configuration. There seems to be two ways to set additional fields to response headers in HAProxy. I currently use http-response set-header, which ...
1
vote
1answer
252 views

Access to Proxy Protocol address within HAProxy

I am running HAProxy that is receiving layer 4 proxy protocol from an upstream source. I have a need to create a custom HTTP header with the address contained there. I can't seem to find how I can ...
1
vote
0answers
100 views

nginx force http header overwrite

We had some misplaced http headers on our sites set up for around one day which creates problems on some of our subdomains. Resolving this fault is pretty hard because the headers we sent are valid ...
1
vote
1answer
132 views

How to stop tinyproxy from using “Proxy-Connection” header

I just setup tinyproxy for the first time, and I'm trying to make it mimic a normal connection as closely as possible. I already disabled the Via header, but I'm not sure how to change the ...
0
votes
1answer
40 views

Can we log the `Accept-Encoding` field in request when using nginx?

I've read ngx_http_core_module#variables, however I cannot find the Accept-Encoding field.
0
votes
1answer
48 views

Which domain-name was requested? Running virtual hosts on Mongoose web server

I'm currently running Mongoose WebServer 5.5 on Windows 7 I have a number of virtual hosts, running on a single Mongoose server on one IP node. The access log entries are typically 157.55.39.146 - ...
0
votes
0answers
23 views

Forward Remote_addr across Apache and OHS

I am attempting a hosting site with weblogic listening behine OHS and Apache. I am able to retain the remote_addr on apache using remote_ip but not able to carry it forward to OHS. I can share ...
0
votes
1answer
107 views

lighttpd: remove charset=UTF-8 from content type

lighttpd 1.4.31-4+deb7u3 automatically adds ;charset=UTF-8 to the content-type of .html and .php files. How can I remove that? Setting the content type in PHP itself does not help; lighttpd still ...
0
votes
0answers
84 views

Serve growing audio file with Apache

I'm trying to play a growing audio file on my website and I don't know how Apache should be configured for this task. I read that I need to send a status code 206 (Partial Content). This is done by ...
0
votes
1answer
87 views

apache2 - Why caching of a static file is not happening?

I am working on to cache static files in a SugarCRM environment, which is not happening as I would like to. I have narrowed it to one specific case, and I would like to know why this is so. On the ...