Content-Security-Policy header gets lowercased

Joó Ádám adam at
Wed Oct 7 10:19:56 UTC 2015


I noticed that when adding a `Content-Security-Policy` header to the
response, the header name gets lowercased. Neither
`Content-Security-Polic` or `Content-Security-Policyy`, or any other
header I came across gets lowercased. Is this a bug?


More information about the nginx mailing list