HTTP header fields are components of the message header of requests and responses in the Hypertext Transfer Protocol (HTTP). They define the operating parameters of an HTTP transaction.

learn more… | top users | synonyms

0
votes
2answers
368 views

How can I know that an HTTP response is a response to HEAD request?

Let's say I see an HTTP response with its header. How do I know if it is a response to a HEAD request? RFC 2616 states that if 200 OK is the status of the response, it should contain a message body ...
1
vote
2answers
155 views

Automatic server redirect that passes through as the referring site

As always, I would like to thank all of your help and assistance in advance. I am looking for a way to automatically redirect a user to a site and maintain the redirect site as the referral site. Let ...
2
votes
1answer
1k views

Sending Content (Message Body) along with 304 Not Modified header

For static html pages, when the response header from the server is 304 Not Modified, isn't it the server's responsibility to send back only the headers and not the message-body (html content) along ...
0
votes
1answer
2k views

What is a CCM_POST HTTP Request?

I keep getting error messages like these on a server running an installation of an embedded Mongoose webserver [1280931978] [error] [client 66.65.74.105] CCM_POST /ccm_system/request: Error 400: Bad ...
2
votes
4answers
4k views

How to check for the existence of a response header in Nginx rules?

Setting up the rewriting rules for the request proved to be quite easy in Nginx. For the response, not so much (at least, not for me). I want to strip the Content-Type header from the response if the ...
12
votes
2answers
11k views

What is the mandatory information a HTTP Request Header must contain?

What is the mandatory information a HTTP Request Header must contain ?
0
votes
1answer
1k views

retrieve file size from HTTP headers without downloading the file with CURL (no HEAD)

What i want to do is knowa file size and not download it. I've tried it with HEAD but the server doesn't respond curl_setopt($curl, CURLOPT_NOBODY, true); if i quit this , it will , but it will ...
0
votes
1answer
257 views

Force http1.0 in IIS6

I've recently read in Steve Sounders book "Even Faster Web Sites" that we can increase the number of objects that older browsers like IE6 and 7 to download more than 2 objects at a time from a site by ...
0
votes
1answer
693 views

CISCO ASA 5505 Base Licence - Ability to interpret http request headers (host headers)

Base licence configured CISCO ASA 5505 is not capable of routing based on interpretation of the inbound http request headers - affectively host header redirect - am I correct? If I am correct will an ...
1
vote
2answers
368 views

Why isn't this HTTP response cached?

Below are the request and response headers for a page in my web application: Request Headers: GET http://my-server/myapp/mypage.aspx?myid=123 HTTP/1.1 Accept: */* Accept-Language: en-US User-Agent: ...
4
votes
1answer
4k views

How can I remove HTTP headers with .htaccess in Apache?

I have a website that is sending out "cache-control" and "pragma" HTTP headers for PHP requests. I'm not doing that in the code, so I'm assuming it's some kind of Apache configuration, as suggested by ...
0
votes
1answer
228 views

Do all web caches understand the “Cache-Control” HTTP header?

I'd like to avoid the "Expires" header, and use "Cache-Control" only - or maybe the other way around. The headers will account for a significant percentage of my traffic, so I'd prefer not to "use ...
6
votes
3answers
3k views

Amazon S3 not sending Content-Type header

I have an application that downloads content from various sources. It relies on the "Content-Type" header being set on images. The majority of web-servers do this correctly but it appears Amazon S3 ...
5
votes
1answer
8k views

Force encoding with IIS 7

I try to force encoding with IIS 7. When I add in the http response headers the key : Content-Type and value charset=utf-8 i got this key content-type : text/html,content-type=utf-8 it's there a ...
0
votes
2answers
1k views

Configure Apache with a htaccess file to strip out unneeded respond-headers

For ultimate speed, I want my Apache server strip unneeded headers from the response. Currently, the headers looks like this (excluding the status header): Connection:Keep-Alive Content-Length:200 ...
13
votes
2answers
8k views

Difference between `curl -I` and `curl -X HEAD`

I was watching the funny server type from http://www.reddit.com with curl -I http://www.reddit.com when I guessed that curl -X HEAD http://www.reddit.com would do the same. But, in fact, it doesn't. ...
4
votes
2answers
14k views

Header set Access-Control-Allow-Origin not working with mod_rewrite + mod_jk

My first question on here on SF so please forgive me if I manage to bork the post. :) Anyways, I'm using mod_rewrite on one of my machines with a simple rule that redirects to a webapp on another ...
0
votes
1answer
296 views

Temporarily Utilizing 304 Header on Apache for Crawlers

I have a client who has a hosting arrangement with 400 customer sites all hosted through SuPHP in CGI mode on Apache. The sysop is now gone and the client is calling on me for rolling out a new PHP ...
3
votes
2answers
1k views

IIS 7.5 Custom HTTP Response Headers Not Working

Trying to setup custom HTTP Response Headers on a new install of IIS7.5 on Windows Server 2008 R2 Standard and they are not working. Default headers work fine (X-Powered-By, etc...). Modifying ...
1
vote
1answer
537 views

if I set up the expire http header of a css file to 1 year, if I modify that file, will it be ignored by the browser using rails?

I'm using rails with nginx/passenger. If I set up the expire http header of a css file to 1 year, if I modify that file, will it be ignored by the browser (ie, it will not request the new version)? ...
0
votes
2answers
302 views

What could cause a WMV to not play to completion in a browser?

A realtor has had videos created for a community she is selling homes for, the people who made the videos gave them to us in WMV format. I can play these videos without any problem in Windows Media ...
2
votes
3answers
2k views

HTTP Headers - need to check OPTIONS

I've received the results of a pen test and there is some unwanted exposure in the HTTP OPTIONS where the fact that Frontpage Server Extensions was available (now removed) was reported. I need to ...
1
vote
1answer
2k views

How to disable HTTP options on Sun servers

Using BURP to send a OPTIONS * HTTP/1.0 request to Sun Web Server 7.0 returns: HTTP/1.1 200 OK Server: Sun-Java-System-Web-Server/7.0 Date: Wed, 03 Feb 2010 01:05:14 GMT Allow: HEAD, GET, PUT, ...
3
votes
2answers
2k views

Set Apache HTTP header except for specified URL

I'm using Apache 2.2 and want to set the X-Frame-Options header to "deny" across most of the site. I can turn it on unconditionally using mod_headers. However, there is one CGI scripts that returns ...
3
votes
1answer
1k views

only http header communication? - please explain

The screen shot below is made using firebug. The firefox <-> web server communication captured happened after clicking login button. But I cannot see any redirection in my firefox. Does that mean ...
1
vote
1answer
776 views

ngrep - possible to hide payloads?

I use ngrep a lot to inspect HTTP headers to see what's going on. I use the -q flag for quiet output, but I really don't want to see the payloads, only the headers. Is there a way to do this? My ...
1
vote
2answers
1k views

HTTP: 204 No Content Header

I just registered a new domain and at the moment it sends a 403. Is the HTTP-Header "204 No Content" a good header for a domain with no content at the moment, because I'm working on the site and the ...
1
vote
3answers
6k views

Remove X-Forwarded-For header in Squid 3.0

Some months ago I was working with Squid 3.0 and managed to get rid of the X-Forwarded-For header completely. Now I am trying to do the same thing but I do not seem to hit the nail. I have tried ...
5
votes
2answers
8k views

How to send Content-Disposition headers in apache for files?

I have a directory of text files that I'm serving out with apache 2. Normally when I (or any user) access the files they see them in their browser. I want to 'force'* the web browser to pop up a 'Save ...
1
vote
2answers
435 views

Expires header for specific file types

How can I add an expires header just for pngs, and the ico file?
2
votes
1answer
2k views

Disable User-Agent based Vary header response in nginx?

It seems that nginx includes a Vary: Accept-Encoding header in some cases regardless of the file types I specify via "gzip_types". I do not have much experience with nginx. Does it in fact send Vary: ...
0
votes
1answer
231 views

Upstream proxy help!

My scenario is this: My manager wants random unmanaged users who come into meetings to have easy wireless access to the internet. We are running windows server 2003 with AD. The issue is our internet ...
32
votes
5answers
37k views

How to remove IIS/ASP.NET Response Headers

I have a couple IIS/6.0 servers that security is asking me to remove a couple of response headers that are sent to client browsers on requests. They are concerned about divulging platform information ...
2
votes
6answers
3k views

HTTP load balancer with header-based routing?

I am looking for a HTTP load balancing solution that will provide the following: 1) Accept HTTP connections on port X and forward them to one of multiple other hosts (and/or ports), either randomly ...