HTTP header fields are components of the message header of requests and responses in the Hypertext Transfer Protocol (HTTP). They define the operating parameters of an HTTP transaction.

learn more… | top users | synonyms

5
votes
2answers
3k views

Is the Last-Modified HTTP header required for browser caching?

When I unset the Last-Modified header in Apache (ETags are also disabled), Firefox (4.01) will not cache any file regardless of whether I set a future Expires header or enable the Cache-Control ...
0
votes
2answers
871 views

http headers necessary ensure cloudfront distributed files don't get browser cached

I have a Rails-generated JS file that I want to distribute via CloudFront (using my Rails app on EC2 as the origin server). Does anyone know which headers I should use in the response for my JS file ...
1
vote
2answers
2k views

nginx status code 200 and 304

I'm using nginx + passenger. I'm trying to understand the nginx response 200 and 304. What does this both means? Sometimes, it responses back in 304 and others only 200. Reading the YUI blog, it seems ...
0
votes
1answer
1k views

Strange HTTP response headers being sent to Internet Explorer 8 only

So here's something I find puzzling. I'm working on a Javascript that needs to parse XML data and I'm using jQuery's $.ajax to fetch and parse the data. It's working great everywhere except when I ...
0
votes
2answers
478 views

If a server returns Cache-Control=public with no Max-Age or Expires, can a proxy cache it forever?

If a server returns Cache-Control=public with no Max-Age or Expires, can a proxy server cache it forever? Do proxies or the spec have a built-in default for these values? Is it always wrong for a ...
12
votes
5answers
16k views

Shell command to see the HTTP headers

Is there a shell command to see the headers of a HTTP request? For example, I would like to know what the headers retrieved from www.example.com/test.php are How can I do this?
0
votes
3answers
907 views

Website with optimal cache control

My goal I would like to let browsers cache my whole website, but only download the new information when I have changed one or more files. My situation After some research I have found a way to do ...
1
vote
2answers
1k views

Why would PROPFIND and DAV appear in response headers when WebDAV is disabled?

I've got a bit of a challenge I'm hoping someone has some ideas on. I'm in the process of deploying a web app to a shared environment with a host running IIS7.5. A security scan has shown that WebDAV ...
3
votes
1answer
4k views

How to disable ETag headers in Tomcat

Tomcat seems to send an ETag header with each response by default. I'd like to disable these for reasons outlined here. I know I can strip them out in my Apache configuration, but is there any way to ...
1
vote
1answer
1k views

Apache mod_cache and mod_deflate?

We have a Apache 2.2 with mod_cache and mod_deflate among other modules. The problem is that if we append Vary header as in Apache documentation... # Make sure proxies don't deliver the wrong content ...
0
votes
1answer
1k views

How do I configure Jetty (via jettyrunner) so that it names a character set in the Content-Type response header?

I use Jetty (via the oh-so-handy Jetty Runner) for day-to-day web application testing. One thing I've recently stumbled on is the fact that I don't get a character set called out in the "Content-Type" ...
0
votes
1answer
738 views

Web server serves up PDF file as wrong mime type

Following an upgrade to the latest version of Joomla, downloads from a website I am working on are being served incorrectly. Example page: ...
1
vote
2answers
1k views

Why, sometimes the full content is returned unchanged, while If-Modified-Since is set?

my php-generated thumbnail files and combined javascript and css files (all having their expiration dates anc cache=public set etc) return the full content sometimes, other times they load from proxy ...
0
votes
1answer
1k views

Using an environment variable in mod_headers set by mod_rewrite

What I want to achieve is hitting a URL, say http://myhost/eng/LOGIN/login?BID=12&BFORENAME=C&BSURNAME=C and have those parameters inserted as headers on the request. The parameters are fixed ...
2
votes
1answer
8k views

get the authenticated user under apache

Using Apache 2.2 on Windows with mod_auth_sspi and mod_headers. I'm trying to pass the current authenticated user through to the proxy target in the X-Remote-User header. I expect that this is ...
0
votes
1answer
100 views

Enforcing a specific order for cookie headers

We have an application that cares about the order of cookie headers. It shouldn't, since this isn't mandated by the standards and indeed we're getting the headers in various different orders So we ...
3
votes
1answer
2k views

How to remove response header in lighttpd configuration

There is mod_setenv for adding: setenv.add-response-header = ( "Header" => "value" ) But I can't find anything to remove response headers. I have to be sure, that my content is not cached by ...
1
vote
0answers
445 views

Apache HTTP: Conditionally Set the Last-Modified header

I want to set the Last-Modified date with one of these values: If the request header has the If-Modified-Since value, use this value Else use current date How can I configure this in apache's ...
0
votes
1answer
499 views

Should Squid honor no-cache and s-maxage in reverse proxy mode?

I'm using Squid 2.7.STABLE9, which I compiled from source. My understanding of no-cache is that the cache must revalidate with the origin server before serving up a cached copy of the resource, and ...
0
votes
3answers
343 views

Server Leaks Internal IP Address through content-location on port 443

I have 2 servers doing this that use https. I was getting this on both port 80 and 443 but I followed the instructions on http://support.microsoft.com/kb/834141/ and resolved the issue with 80. I am ...
0
votes
2answers
666 views

Masking / Pointing subdomain to different server and keeping same url in address

Originally posted on Stack Overflow. This may be a question for Server Exchange but I am starting to feel pretty cozy here and I feel like someone here will definitely know the answer. We are ...
0
votes
1answer
1k views

Way Around Empty HTTP_REFERRER From 301 Redirect?

I have a client who is in need of determining the traffic statistics from a large number of "tinyurl" shortened URLs, that all redirect to his site. The services that he's used include TinyURL, ...
2
votes
1answer
2k views

Set Server response header in IIS7

Is it possible in IIS7, without using URL Scan to remove the Server in the response header? I have tried the following: HttpModule I've installed a signed one into the GAC and also tried the ...
0
votes
1answer
155 views

caching images in iis6

i try to make the images in my website read from the cache i try adding http heading like this but i still get in Yshow that it isn't caching. how can i check if a specific image has expire header?
0
votes
2answers
2k views

how do I setup Apache's Content-Encoding Header?

When attempting to validate my site with the W3C validator, it returns the error, "Don't know how to decode Content-Encoding 'none'". Firebug confirms that my server is sending the header, ...
0
votes
2answers
384 views

How can I know that an HTTP response is a response to HEAD request?

Let's say I see an HTTP response with its header. How do I know if it is a response to a HEAD request? RFC 2616 states that if 200 OK is the status of the response, it should contain a message body ...
1
vote
2answers
159 views

Automatic server redirect that passes through as the referring site

As always, I would like to thank all of your help and assistance in advance. I am looking for a way to automatically redirect a user to a site and maintain the redirect site as the referral site. Let ...
2
votes
1answer
1k views

Sending Content (Message Body) along with 304 Not Modified header

For static html pages, when the response header from the server is 304 Not Modified, isn't it the server's responsibility to send back only the headers and not the message-body (html content) along ...
0
votes
1answer
2k views

What is a CCM_POST HTTP Request?

I keep getting error messages like these on a server running an installation of an embedded Mongoose webserver [1280931978] [error] [client 66.65.74.105] CCM_POST /ccm_system/request: Error 400: Bad ...
2
votes
4answers
5k views

How to check for the existence of a response header in Nginx rules?

Setting up the rewriting rules for the request proved to be quite easy in Nginx. For the response, not so much (at least, not for me). I want to strip the Content-Type header from the response if the ...
12
votes
2answers
13k views

What is the mandatory information a HTTP Request Header must contain?

What is the mandatory information a HTTP Request Header must contain ?
0
votes
1answer
1k views

retrieve file size from HTTP headers without downloading the file with CURL (no HEAD)

What i want to do is knowa file size and not download it. I've tried it with HEAD but the server doesn't respond curl_setopt($curl, CURLOPT_NOBODY, true); if i quit this , it will , but it will ...
0
votes
1answer
263 views

Force http1.0 in IIS6

I've recently read in Steve Sounders book "Even Faster Web Sites" that we can increase the number of objects that older browsers like IE6 and 7 to download more than 2 objects at a time from a site by ...
0
votes
1answer
714 views

CISCO ASA 5505 Base Licence - Ability to interpret http request headers (host headers)

Base licence configured CISCO ASA 5505 is not capable of routing based on interpretation of the inbound http request headers - affectively host header redirect - am I correct? If I am correct will an ...
1
vote
2answers
379 views

Why isn't this HTTP response cached?

Below are the request and response headers for a page in my web application: Request Headers: GET http://my-server/myapp/mypage.aspx?myid=123 HTTP/1.1 Accept: */* Accept-Language: en-US User-Agent: ...
4
votes
1answer
4k views

How can I remove HTTP headers with .htaccess in Apache?

I have a website that is sending out "cache-control" and "pragma" HTTP headers for PHP requests. I'm not doing that in the code, so I'm assuming it's some kind of Apache configuration, as suggested by ...
0
votes
1answer
232 views

Do all web caches understand the “Cache-Control” HTTP header?

I'd like to avoid the "Expires" header, and use "Cache-Control" only - or maybe the other way around. The headers will account for a significant percentage of my traffic, so I'd prefer not to "use ...
6
votes
3answers
3k views

Amazon S3 not sending Content-Type header

I have an application that downloads content from various sources. It relies on the "Content-Type" header being set on images. The majority of web-servers do this correctly but it appears Amazon S3 ...
5
votes
1answer
9k views

Force encoding with IIS 7

I try to force encoding with IIS 7. When I add in the http response headers the key : Content-Type and value charset=utf-8 i got this key content-type : text/html,content-type=utf-8 it's there a ...
0
votes
2answers
2k views

Configure Apache with a htaccess file to strip out unneeded respond-headers

For ultimate speed, I want my Apache server strip unneeded headers from the response. Currently, the headers looks like this (excluding the status header): Connection:Keep-Alive Content-Length:200 ...
15
votes
2answers
11k views

Difference between `curl -I` and `curl -X HEAD`

I was watching the funny server type from http://www.reddit.com with curl -I http://www.reddit.com when I guessed that curl -X HEAD http://www.reddit.com would do the same. But, in fact, it doesn't. ...
4
votes
2answers
15k views

Header set Access-Control-Allow-Origin not working with mod_rewrite + mod_jk

My first question on here on SF so please forgive me if I manage to bork the post. :) Anyways, I'm using mod_rewrite on one of my machines with a simple rule that redirects to a webapp on another ...
0
votes
1answer
299 views

Temporarily Utilizing 304 Header on Apache for Crawlers

I have a client who has a hosting arrangement with 400 customer sites all hosted through SuPHP in CGI mode on Apache. The sysop is now gone and the client is calling on me for rolling out a new PHP ...
3
votes
2answers
1k views

IIS 7.5 Custom HTTP Response Headers Not Working

Trying to setup custom HTTP Response Headers on a new install of IIS7.5 on Windows Server 2008 R2 Standard and they are not working. Default headers work fine (X-Powered-By, etc...). Modifying ...
1
vote
1answer
543 views

if I set up the expire http header of a css file to 1 year, if I modify that file, will it be ignored by the browser using rails?

I'm using rails with nginx/passenger. If I set up the expire http header of a css file to 1 year, if I modify that file, will it be ignored by the browser (ie, it will not request the new version)? ...
0
votes
2answers
312 views

What could cause a WMV to not play to completion in a browser?

A realtor has had videos created for a community she is selling homes for, the people who made the videos gave them to us in WMV format. I can play these videos without any problem in Windows Media ...
2
votes
3answers
2k views

HTTP Headers - need to check OPTIONS

I've received the results of a pen test and there is some unwanted exposure in the HTTP OPTIONS where the fact that Frontpage Server Extensions was available (now removed) was reported. I need to ...
1
vote
1answer
2k views

How to disable HTTP options on Sun servers

Using BURP to send a OPTIONS * HTTP/1.0 request to Sun Web Server 7.0 returns: HTTP/1.1 200 OK Server: Sun-Java-System-Web-Server/7.0 Date: Wed, 03 Feb 2010 01:05:14 GMT Allow: HEAD, GET, PUT, ...
3
votes
2answers
3k views

Set Apache HTTP header except for specified URL

I'm using Apache 2.2 and want to set the X-Frame-Options header to "deny" across most of the site. I can turn it on unconditionally using mod_headers. However, there is one CGI scripts that returns ...
3
votes
1answer
1k views

only http header communication? - please explain

The screen shot below is made using firebug. The firefox <-> web server communication captured happened after clicking login button. But I cannot see any redirection in my firefox. Does that mean ...