X-Frame-Options: Nginx includes header twice

[Jonathan Matthews]

On 27 January 2014 02:49, Some Developer <someukdeveloper at gmail.com> wrote:
> Seems a bit strange to me that an application framework sets HTTP headers.
> Surely this should be left to the HTTP server? What are other peoples
> opinions on this?

There are many instances where the application is the most
knowledgable layer regarding which HTTP headers to send: think
caching; think keep-alive. In general, the absolute /least/ you can do
in the reverse-proxy layer, the better. IMHO.

J