Questions tagged [http-headers]
In the Hypertext Transfer Protocol (HTTP), HTTP header fields contain the operating parameters of an HTTP request or response. With the request or response line (first line of message), they form the message header.
http-headers
12,038
questions
0
votes
0
answers
21
views
Forcing a page to only be allowed inside an iframe?
I have a special page in a webserver that should only be shown when embedded inside a specific site as an iframe.
Using the Content-Security-Policy I can specify which sites are allowed as frame-...
- 10.6k
1
vote
2
answers
252
views
Do I need to create a proxy server to prevent CORS errors?
I'm building a simple React app and want to display TripAdvisor photos of a specified city. TripAdvisor has an API to do this, and when I make a request through Postman, no issue. I get the data ...
- 157
0
votes
0
answers
20
views
How do I get the IP address of the server hosting the iframe I provided?
I have a django application, this application contains a form and i have another server which running php. In the PHP server, i created a html template which includes an form as iframe from my Django ...
- 1
0
votes
0
answers
10
views
Access-Control-Allow-Origin is null even when set in web.config
We have a vulnerability reported in our application. Access-Control-Allow-Origin is reflecting the same origin value that is calling the resource.
It is happening because Access-Control-Allow-Origin ...
- 133
0
votes
0
answers
17
views
Browser requested asset from script tag and adding Accept-Encoding to header
Simplified question:
Is there a way to add an attribute to the tag in HTML to have the browser request the resource with an 'Accept-Encoding' header? If not, is there a way to put something else on ...
- 651
0
votes
0
answers
46
views
CreatedAtAction is returning Location as null from API to the client app (.NET 8, Blazor)
I am somewhat of a beginner so bear with me.
I have an HttpPost-method in an API, that makes use of the CreatedAtAction-method for the http-response:
[HttpPost]
public async Task<ActionResult<...
1
vote
1
answer
345
views
Duplicate header "Transfer-Encoding" in response causes client exception - "java.io.IOException: Illegal character in chunk size: 123"
There are 3 Spring Boot services (Client, Proxy, API) - Client is calling API and request is sent to/back through proxy, approx 1% of responses are corrupted and client unable to read it - throwing ...
- 99
0
votes
0
answers
36
views
What determines how the frame-ancestors value is set in the Content-Security-Policy?
I'm trying to frame content from a 3rd-party provider in an iframe on my Wordpress site. I'm emulating something that's set up on an affiliated site. When loading and attempting to download the iframe ...
- 97
0
votes
0
answers
26
views
Snapchat Public API Content-Type header not supported
I am attempting to make a GET request to the following endpoint:
GET https://businessapi.snapchat.com/public/v1/public_profiles/{profile_Id}/stats
However, I'm encountering difficulties with the ...
- 164
2
votes
1
answer
189
views
Spring Integration fails at "Priority" HTTP header validation for HTTP/2
With the recent rollout of Chromium 124 to Chrome, a new "Priority" HTTP header has been introduced in the request header that supports the HTTP/2 and HTTP/3 protocols by default. More info ...
- 23
0
votes
0
answers
55
views
Why might PHP be incorrectly detecting it is running a web (and not a console) context? [duplicate]
I have a PHP script on a shared web host that reads a lot of log files and summarises data in JSON format. This script is run periodically via Cron. I do not control the server, but I have FTP access.
...
- 20.3k
0
votes
1
answer
76
views
LoadBalancer: add http header before send request to backend
I need a component, probably a Load Balancer or a proxy, that adds a custom header on my http hequest before sending it to the backend (spring app running on a AWS EKS cluster). The value of the ...
0
votes
0
answers
37
views
Custom Header Type using Hashes using Faraday
I am using the Faraday gem: https://github.com/lostisland/faraday
I am trying to create a simple custom filter in the request header and can't seem to parse the values correctly:
url = "https://...
- 951
1
vote
1
answer
84
views
Overbyte ICS load pfx file for POST
I try to send a certificate with my POST request without the server requesting it first, preemtive speaking.
With Indy it works perfectly fine like this:
procedure TMyExampleClass.GetPassword(var ...
0
votes
1
answer
45
views
Best Practices for Passing Custom Headers with Special Characters in RestSharp?
I'm working on a project where I need to send HTTP requests using RestSharp in C#. These requests require custom headers, some of which may contain special characters or non-ASCII characters, such as ...
- 43