HTTP header fields are components of the message header of requests and responses in the Hypertext Transfer Protocol (HTTP). They define the operating parameters of an HTTP transaction.

learn more… | top users | synonyms

4
votes
0answers
341 views

Apache Header Module Loaded but can't set headers in htaccess

I have Apache 2.2.29 (unix) setup and running on my new dev machine (mac). I am trying to set CORS headers for an API project - something that I have done many times. The htaccess file for the ...
4
votes
0answers
978 views

How to log effective outgoing HTTP requests made by Squid, with headers after adaptation?

I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header. Here is my config : request_header_access User-Agent deny all ...
2
votes
0answers
28 views

HAProxy, why would a replaced HTTP header have a number at the end?

Can someone explain what the "X-Forwarded-Proto2" header is in this HAProxy frontend stanza?: frontend main *:443 ... reqirep ^(X-Forwarded-Proto:)(.*) X-Forwarded-Proto2:\2 ... I understand ...
2
votes
0answers
99 views

HSTS exclude specific subdomain with “includeSubdomains”

I'm using HSTS with this header on my website: Strict-Transport-Security: max-age=15768000; includeSubDomains This works as intended and forces the browser to redirect all http connections to ...
2
votes
0answers
181 views

Set CORS headers on nginx

Addresses like http://vpsxxx.ovh.net/g/search?q=ok or http://vpsxxx.ovh.net/so/questions/34738694/how-to-move-items-on-the-screen-for-a-game-using-javascript are proxied well, when trying them from ...
2
votes
0answers
114 views

HAProxy: Limmit concurrent connections based on HTTP header field

I try to limit the number of concurrent connections using HAProxy stick-tables based on HTTP header fields. I could find plenty of examples using IP addresses, but this doesn't work in my case. Our ...
2
votes
0answers
43 views

Strange faulty 16000d response timing in gdevtools for specific XHR

We have some XHR on our website, that is reported in Google developer tools' network timeline as Receiving for 16035.5 days. There actually is a response, and for sure it does not take as long as ...
1
vote
0answers
24 views

Cookie Secure Flag not persistent

I'm trying to implement a Secure flag for all cookies. I'm doing this via Headers. Here's how I did it: Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4" It ...
1
vote
0answers
50 views

nginx is ignoring root location header (location /)

I have self-compiled nginx 1.9.14 with http2 support: nginx version: nginx/1.9.14 built by gcc 4.9.2 (Debian 4.9.2-10) built with OpenSSL 1.0.1k 8 Jan 2015 TLS SNI support enabled So I have a ...
1
vote
0answers
62 views

Very long useragent

We have requests in our server log with a very long useragent: HEADER: user-agent=Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0; WUID=4bddaa48430e60af6132822cd6fab6c4; WTB=2873; WUID=...
1
vote
0answers
205 views

How do I allow users to override X-Frame-Options when using Apache + PHP-FPM?

I have an Ubuntu 14.04 server running Apache + PHP-FPM + FastCGI, serving user home pages. For security, I have enabled in Apache's configuration: Header set X-Content-Type-Options: "nosniff" Header ...
1
vote
0answers
15 views

Negative impact of setting Apache's LimitRequestFieldSize very high?

On apache httpd 2.2, I would like to increase the value of LimitRequestFieldSize to 48k or maybe even 65k. Has anyone experience with setting the value of LimitRequestFieldSize to such high values? ...
1
vote
0answers
51 views

ColdFusion fails to include custom HTTP response header set in IIS 8.5

I have a Windows 2012 R2 server running IIS 8.5 and ColdFusion 11. Under a specific directory ("mydirectory") I added an HTTP Response Header (Name: X-ResponseHeader, Value: Test). The resulting web....
1
vote
0answers
138 views

How to pass GeoIP HTTP request headers to backend with Apache?

I am using nginx to proxy HTTP requests to a PHP application running in the scope of Apache 2.4 (mod_php5) within a Docker container (cbeer/piwik). +------------------------------...
1
vote
0answers
217 views

Access-Control-Allow-Origin header missing from a response

I'm trying to debug an issue. On one of my sites, the font files are not loading correctly. Someone has reported this error in the inspector log: Font from origin 'http://d1h0r2f9g9fk4d.cloudfront....
1
vote
0answers
61 views

host header change upstream servers nginx

I have following config in my config file upstream static { server server1.dom.com; server server2.dom.com; } server { listen 80; server name dom.com; location ^~ /images/ { ...
1
vote
0answers
119 views

nginx force http header overwrite

We had some misplaced http headers on our sites set up for around one day which creates problems on some of our subdomains. Resolving this fault is pretty hard because the headers we sent are valid ...
1
vote
0answers
54 views

Printing origin servers name in Apache log

I have configured a reverse proxy setup with Apache as the reverse proxy server and JBoss nodes as origin servers. How do i get the name of origin servers logged in to Apache log. I don't see any ...
1
vote
0answers
120 views

Apache header order

I am working on a private server application for a web based mobile game that uses php to generate responses. In order to do this I am trying to replicate the behavior of the main server as closely as ...
1
vote
0answers
29 views

HEAD request leads to file name too long

I have a website which frequently posts data from client to server of about 3200 characters. I notice that some users of the site when visiting one page in particular will make a HEAD request with the ...
1
vote
0answers
63 views

Date Header always has the same date

I have a server running Windows 2012 with IIS 8.5 that is hosting several sites. For every response that is returned from a client request to any of the sites the Date header has the same value: Key ...
1
vote
0answers
418 views

Error: No 'Access-Control-Allow-Origin' header is present on the requested resource. (NGINX)

I am using NGINX and I am receiving that error in the browser's console. I am so frustrated. According to my boss, I need to set up cors which what I did and still I am getting the same error. This ...
1
vote
0answers
193 views

Amazon ELB + EC2 Header mismatch

Preamble: I have an AWS Elastic Load Balancer in front of a Single Amazon EC2 instance. I have 3 other EC2 instances sending requests via curl to the Load Balancer. Direct requests to the EC2 ip has ...
1
vote
0answers
233 views

Partial content 206 requests on nginx behind WebAuth

I'm having a troubleshooting an issue that I think is likely due to WebAuth authentication when serving .webm videos. The server I have is nginx 1.6.2. I can make 200 GET requests just fine. I also ...
1
vote
0answers
440 views

Set Headers for JSON in Apache proxy

Hello I try set header JSON in Apache proxy. I need this for test login in website. Below I put my apache config. <VirtualHost *:80> ServerName zx.xxxxxxx.xxxxxx.fr ServerAdmin xxxxxx@...
1
vote
0answers
211 views

How to change http header using nginx

We have a problem that a backend system requires the parameters of the Content-Type http header to be in a certain order. For example (note the position of the type="text/xml"): Content-Type: ...
1
vote
0answers
410 views

Can not I properly configure expires headers for apache

I am trying to configure caching for static js/css/img on apache2 (I am using ubuntu). I do not want to use .htaccess due to this answer. So I tried the following: enabled modexpires modified /etc/...
1
vote
0answers
138 views

nginx: how to serve files in gzip format when client accepts “Accept-Encoding: gzip” and inflated otherwise?

I have a folder full of .gz files and would like to serve them transparently inflated if requested by a client that does not send Accept-Encoding: gzip in the request and as-is (gzip'd) otherwise. I ...
1
vote
0answers
1k views

IE 10 HTTP 401 Error on AJAX POST

I've been chasing down an issue and decided to make the most basic reproduction of the issue possible in hopes that a simplified question will help me resolve this. I am receiving a 401 error when ...
1
vote
0answers
523 views

Why pragma: no-cache does not work anymore on IE?

On my employer web server, we have 200+ PHP applications with this kind of code to allow download of a file : header('Content-Disposition: attachment; filename="file.pdf"'); header('Expires: 0'); ...
1
vote
0answers
317 views

Ironport X-Junk header

My school uses Ironport for filtering/monitoring web traffic. I have a bit of curiosity as to why it tacks on a x-junk: header onto everything. After going through a few curl tests, I've found no real ...
1
vote
0answers
462 views

Apache HTTP: Conditionally Set the Last-Modified header

I want to set the Last-Modified date with one of these values: If the request header has the If-Modified-Since value, use this value Else use current date How can I configure this in apache's ...
0
votes
0answers
11 views

Apache Revese Proxy is not cached

I have the below config so all requests to /j/* will be proxied, however why not being cached as told ? Its on windows 2012 and apache 2.4.20 . Thanks ProxyPassMatch "^/j/(.*)$" "http://192.168.1.121/...
0
votes
0answers
68 views

no apache http headers with php5-fpm

I've migrated from standard fastCGI to php5-fpm. Now all headers that are set via Apache (mod_expires, mod_header, and so on) are being discarded (or not set, resp.). For example, I need to parse ...
0
votes
0answers
29 views

Apache Doesn't Unset Headers

We have apache 2.4 with the headers mod enabled. We have two identical VirtualHosts, but the X-Frame-Options header gets set for one site and not the other when unconfigured (tested on both Chrome and ...
0
votes
0answers
103 views

Configure Apache DirectorySlash to honor X-Forwarded-Host set by load balancer

Is there a way to configure the DirectorySlash behavior of Apache to honor the X-Forwarded-Host header set by a load balancer? For example, assume my load balancer host is example.com but it forwards ...
0
votes
0answers
25 views

Ping request timed out when basehttpserver is loading website

I am running a website using basehttpserver. 10.0.xx.xx is the ip to access the site. There is a 'controller' with a cellular modem on it, which hosts the website and runs the basehttpserver. When ...
0
votes
0answers
37 views

How to insert a CAS authentication header in the reply?

I use mod_auth_cas to authorize access to selected Location: <Location /> Authtype CAS AuthGroupFile /var/source/groups require valid-user </Location> Is there a ...
0
votes
0answers
179 views

mod_headers not working in .htaccess

I'm trying to migrate the websites of a client to a new server. The old one was running mod_php 5.2 and apache 2.2, and the new one is running apache 2.4 and php 5.2 in cgi mode (the idea being to ...
0
votes
0answers
29 views

Apache2: How to log the entire status line (including reason phrase)?

Apache logs the status code of the response if %s is in the log format, but I also need to log the reason phrase (the text to the right of the status code). How can I get Apache2 to log the entire ...
0
votes
0answers
70 views

IIS vs Apache - diferent handling of redirect to self

I have a site that forwards all requests to a single php file. In my php code, i have a logout function that fires when the REQUEST_URI is /logout, that destroys the session and then redirects to /. ...
0
votes
0answers
24 views

Forward Remote_addr across Apache and OHS

I am attempting a hosting site with weblogic listening behine OHS and Apache. I am able to retain the remote_addr on apache using remote_ip but not able to carry it forward to OHS. I can share ...
0
votes
0answers
92 views

Serve growing audio file with Apache

I'm trying to play a growing audio file on my website and I don't know how Apache should be configured for this task. I read that I need to send a status code 206 (Partial Content). This is done by ...
0
votes
0answers
409 views

Nginx CORS – Access-Control-Allow-Origin Header not added

I am struggling to get CORS header added to barely any file. I know the if statement might causes nginx to behave wired (http://wiki.nginx.org/IfIsEvil) but I haven't found another approach. Using ...
0
votes
0answers
295 views

Haproxy don't capture added header

I can add new header in haproxy with the "http response add-header" function and it's done successfully because i can see those added headers in my http packet when i use Wireshark. The problem is ...
0
votes
0answers
64 views

Differing if-modified-since headers in IE and Firefox/Chrome

Strangely IE always requests the same non-changed images from my webserver although it should have cached them. In fact Firefox and Chrome (also Opera fyi) do cache these resources. For example ...
0
votes
0answers
100 views

How to troubleshoot an invalid cached response

I've a Google Cloud Engine instance with Suse Linux 13.2 with original network config and without any configured proxy. And I've a problem with an invalid CACHED response I receive from a server. ...
0
votes
0answers
205 views

font-awesome not displaying on Nginx, Rails 4, mina/puma

I made some changes to the nginx config file and I now cannot see any of the font-awesome fonts on FF and Chrome. The fonts are precompiled and in this directory: /root/sites/mina_deploy/current/...
0
votes
0answers
126 views

apache2 ubuntu 14.04. Expire date has been set, but it is not cached anyway

As shown in screenshot, the expire date is 11 May 2016 (a year from now), but the resource is always downloaded everytime I access the website. I set expire date by using htaccess: <IfModule ...
0
votes
0answers
205 views

HTTP response returns valid content-length header but no message body

I've recently found a very strange problem which I can't explain. After posting a HTTP request to our server occasionally the following response will occur: HTTP/1.1 200 OK Date: Mon, 13 Apr 2015 10:...