Stack Overflow
Stack Overflow

Questions tagged [response-headers]

545 questions
5
votes
1 answer

Request Headers vs Response Headers

I am trying to get an image to cache on a website. The image is served by PHP in which I am setting a response header of cache control with the appropriate value, however this is not caching the image, I think it might have something to do with the…
Dogday
  • 175
  • 2
  • 9
5
votes
1 answer

IE11 not respecting filename of content-disposition

My code is opening a PDF in a tab/new window using an .apsx page and the following code: string fileName = GetFileName(so); Response.Clear(); Response.Buffer = true; Response.ContentType =…
mr2112
  • 51
  • 4
5
votes
2 answers

Get index.html response headers

Note: Turns out this is a duplicate: Accessing the web page's HTTP Headers in JavaScript Is there a way to get the request headers for the index.html request? For example, this is a screenshot of me hitting google.com I would like to be able to get…
kentcdodds
  • 27,113
  • 32
  • 108
  • 187
5
votes
1 answer

HTTP Response splitting in case of java

Is HTTP Response splitting possible in below case: String requestFilename = request.getParameter("name"); response.addHeader("content-disposition", "attachment; filename=" + requestFilename); I am directly appending the unsanitized request…
Noname
  • 349
  • 4
  • 11
5
votes
5 answers

Laravel installed, but connection is reset / No data received

I am using Digital Ocean as my server, I have a Ubuntu droplet running laravel fine on my site. But now I am making a 'projects backend' where there is just a folder with test projects that are all laravel projects themselves. They are not linked to…
Haring10
  • 1,517
  • 1
  • 19
  • 37
5
votes
1 answer

Refused to get unsafe header "Content-Length" / reading ID3 tags from external mp3's

I am trying to write a script that loads ID3 tags from an .mp3 file. After searching for hours, I found one script that had a small size and did what I wanted, however I can't get it to work with cross-domain .mp3 files. I have tried using CSP…
Jacob Pedersen
  • 347
  • 2
  • 4
  • 12
4
votes
1 answer

Can't remove x-powered-by header in Node Express

I've gone through every question and blog I can find on the topic, but I can't get rid of x-powered-by: express. Here's my app which has the sole function of not displaying the "x-powered-by: express" header, combining every bit of advice I've been…
Rusty
  • 609
  • 1
  • 4
  • 19
4
votes
1 answer

Axios get response body without decompress in gzip

I have 2 express servers, one working as backend resolving queries to DB and the other working as proxy to redirect requests. Frontend request every data petition to proxy which, in turn sends a modified request via axios to backend in order to get…
Ray
  • 113
  • 1
  • 15
4
votes
3 answers

Kong Ingress Controller - Remove Kong related headers

I have a working installation of Kong on a Kubernetes cluster, using kubernetes-ingress-controller functionality (https://github.com/Kong/kubernetes-ingress-controller). I would like to remove the following Kong's related…
Marco
  • 700
  • 1
  • 14
  • 26
4
votes
1 answer

Why is the 'www-authenticate' header missing from when I call api from React application?

I am calling a web api project from a React application. The api uses JWT for authentication. If the application supplies the API with an expired JWT token, it receives a 401 response as expected, but the 'www-authentication' header (which includes…
GWSD
  • 41
  • 1
  • 3
4
votes
2 answers

How to remove Server Header in Asp.Net Core 2.2.1 Web App?

I'm using Asp.Net Core 2.2.1. I'm trying to remove the server Header from the response. I tried adding options.AddServerHeader = false; inside ConfigureKestrel(), but still unsuccessful. Please assist me on where I'm going wrong. Here is my…
fingers10
  • 6,675
  • 10
  • 49
  • 87
4
votes
2 answers

Spring Boot + Security: No Access-Control-Allow-Origin header when setting allowed origins

I'm using Spring Boot v2.1.1.RELEASE together with Spring Security and am trying to log into the application via REST. I have a configuration file which implements WebMvcConfigurer so I can override the addCorsMappings method: @Override public void…
GeckStar
  • 1,136
  • 1
  • 14
  • 22
4
votes
1 answer

Response headers missing with http status code 102

I'm currently developing a REST API in which I need to return a 102 HTTP status code (processing) while I'm generating an export. Workflow : POST /exports return 201 with data GET /exports/id return 102 with data if the export is…
Schnapse
  • 485
  • 1
  • 5
  • 19
4
votes
1 answer

accessing response header via Axios

I'm using Axios to make a secure POST call to an API. This returns an URL within the response headers under 'Location'. I can see the URL being populated within Chrome's dev tools: but the response inside JS from Axios (below) doesn't contain this…
Rich
  • 970
  • 2
  • 16
  • 42
4
votes
3 answers

Changing Tomcat server name in response header, is that possible?

When a http request from a browser is made, typically the server container will send along in the header what server it was. For tomcat it sends Server:Apache-Coyote/1.1 I know I can overwrite this header, for each request, but there is also…
mjs
  • 21,431
  • 31
  • 118
  • 200
1 2 3
…
36 37