Content-Security-Policy header gets lowercased

Joó Ádám adam at
Thu Oct 8 22:50:17 UTC 2015

Hi Francis,

> How can I reproduce the problem that you see?

Check with Firefox…

Your response helped me realize that this is an issue with the Firefox
developer tools, and it is not specific to Content-Security-Policy,
for example it lowercases five other headers that Twitter sends me.

I almost posted a bug report, but then I found that someone has
already done so more than two years ago, and the resolution was
essentially „who cares”:

Thanks for checking it out and sorry for the hassle.


More information about the nginx mailing list