<div dir="ltr"><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">Make sure you test this unexpected behavior with a minimal, reproducible configuration.<br></div><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">If you succeed, please share it or (even better!) fill a <a href="https://trac.nginx.org/">bug report</a>. Otherwise, that meant you probably did something Wrong.<br></div><div class="gmail_extra"><br><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">You were previously saying proxy_hise_headers did not pass cookies to the client. Now yo uare saying clients are able to grab their cookie.<br></div><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">I am a bit confused, here...</div><div><div class="gmail_signature"><font size="1"><span style="color:rgb(102,102,102)">---<br></span><b><span style="color:rgb(102,102,102)">B. R.</span></b><span style="color:rgb(102,102,102)"></span></font></div></div>
<br><div class="gmail_quote">On Fri, Mar 25, 2016 at 10:33 PM, john_smith77 <span dir="ltr"><<a href="mailto:nginx-forum@forum.nginx.org" target="_blank">nginx-forum@forum.nginx.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">So I found a solution and it seems like there is unexpected behavior from<br>
nginx. proxy_hide_header Set-Cookie does not seem to work when the location<br>
block is set to /<br>
<br>
So:<br>
<br>
location / {<br>
#Lots of other proxy stuff here......<br>
proxy_hide_header "Set-Cookie"; }<br>
<br>
does not allow a cookie to ever be set, but:<br>
<br>
location ~home.html {<br>
#Lots of other proxy stuff here......<br>
proxy_hide_header "Set-Cookie"; }<br>
<br>
will allow cache HITS but won't cache Set-Cookie headers. Clients are still<br>
able to get the cookies from the back end and will never get another users<br>
session cookies.<br>
<br>
Posted at Nginx Forum: <a href="https://forum.nginx.org/read.php?2,265629,265658#msg-265658" rel="noreferrer" target="_blank">https://forum.nginx.org/read.php?2,265629,265658#msg-265658</a><br>
<div class="HOEnZb"><div class="h5"><br>
_______________________________________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org">nginx@nginx.org</a><br>
<a href="http://mailman.nginx.org/mailman/listinfo/nginx" rel="noreferrer" target="_blank">http://mailman.nginx.org/mailman/listinfo/nginx</a><br>
</div></div></blockquote></div><br></div></div>