Content-Security-Policy header gets lowercased

Joó Ádám adam at jooadam.hu
Thu Oct 8 22:50:17 UTC 2015


Hi Francis,

> How can I reproduce the problem that you see?

Check with Firefox…

Your response helped me realize that this is an issue with the Firefox
developer tools, and it is not specific to Content-Security-Policy,
for example it lowercases five other headers that Twitter sends me.

I almost posted a bug report, but then I found that someone has
already done so more than two years ago, and the resolution was
essentially „who cares”:
https://bugzilla.mozilla.org/show_bug.cgi?id=867878

Thanks for checking it out and sorry for the hassle.


Ádám



More information about the nginx mailing list