X-Frame-Options: Nginx includes header twice
someukdeveloper at gmail.com
Tue Jan 28 11:04:05 UTC 2014
On 27/01/2014 09:50, Jonathan Matthews wrote:
> On 27 January 2014 02:49, Some Developer <someukdeveloper at gmail.com> wrote:
>> Seems a bit strange to me that an application framework sets HTTP headers.
>> Surely this should be left to the HTTP server? What are other peoples
>> opinions on this?
> There are many instances where the application is the most
> knowledgable layer regarding which HTTP headers to send: think
> caching; think keep-alive. In general, the absolute /least/ you can do
> in the reverse-proxy layer, the better. IMHO.
Fair enough. It would be somewhat easier to manage if all headers were
implemented in one place or the other. If I could set arbitary headers
in Django then I could do it all there but at the moment I have some
headers set in my Nginx configuration and some headers that appear to be
set in Django and that just makes it confusing.
More information about the nginx