0
votes
1answer
169 views

Does HSTS HTTP Strict-Transport-Security has to be sent with any response file?

I have to add security measures to a website running a Tomcat 6 application server. One of it is adding the HTTP Strict-Transport-Policy Header. I did this by adding a filter which is in turn adding ...
0
votes
1answer
100 views

Varnish Working with Custom http response Headers

I am trying to read http response header that holds an "cacheable". For Example: if (req.http.X-Type ~ "cacheable") { unset req.http.Cookie; return(lookup); } I've Tried a lot of things ...
0
votes
0answers
134 views

Check HTTP response header (Content-Type) and set environment variable?

I want to do a very simple job: check the Content-Type value in the response header and if the value is 'image' then set a particular environment variable. I tried this: SetEnvIf Content-Type ...
6
votes
2answers
9k views

How can I log the response header and body in apache?

I need to determine whether the server (Apache 2) is returning the full contents of a page along with its correct header or not. I have a PHP-script that is executed successfully, but the browser is ...