Welcome! Log In Create A New Profile

Advanced

Re: Nginx as reverse Proxy, remove X-Frame-Options header

Jonathan Matthews
January 09, 2014 07:14AM
On 9 January 2014 11:57, Maxim Dounin <mdounin@mdounin.ru> wrote:
> Hello!
>
> On Thu, Jan 09, 2014 at 10:21:43AM +0000, Jonathan Matthews wrote:
>
>> On 9 January 2014 10:03, basti <black.fledermaus@arcor.de> wrote:
>> > Hello,
>> >
>> > I have a closed-source Webapp that run on an IIS-Webserver and send a
>> > "X-Frame-Options: SAMEORIGIN" header.
>> > I also have to implement this Webapp in my own, Frame based Application.
>> >
>> > So I try to use nginx as a reverse Proxy, but the X-Frame-Options Header
>> > is still send.
>> > How can I remove his header?
>> > I have try "proxy_hide_header X-Frame-Options;" without success.
>>
>> You'll find the answer in the documentation:
>> http://wiki.nginx.org/NginxHttpProxyModule#proxy_set_header
>
> The X-Frame-Options header is returned by a server-side
> application, hence the proxy_hide_header is correct solution,
> while proxy_set_header isn't.

My bad. I was pretty sure I'd had success with 'set foo ""' where
'hide' hadn't worked in the past.

> And, being pedantic, wiki != documentation. Here are
> links to the documentation:
>
> http://nginx.org/r/proxy_set_header
> http://nginx.org/r/proxy_hide_header

Ack that. I'll personally keep linking to the wiki until the documentation

* is significantly better internally hyper-linked;
* has documentation targeted soley towards the open source nginx,
without having to skip to the end of each directive to check for "This
functionality is available as part of our commercial subscription
only";
* has useful pages such as IfIsEvil integrated into it.

I may be wrong about that third one still needing doing, but I
couldn't find IfIsEvil anywhere but the wiki. The presence of a
top-level pointer on each wiki page to http://nginx.org/en/docs/ is
pretty useless, too - it needs to point to the appropriate place in
the docs to get people to start using them.

Didn't you guys pick up several millions a while ago, which was
announced as being somewhat earmarked for improving documentation? :-)

</rant>

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Nginx as reverse Proxy, remove X-Frame-Options header

basti January 09, 2014 05:04AM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

Jonathan Matthews January 09, 2014 05:22AM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

Maxim Dounin January 09, 2014 06:58AM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

Jonathan Matthews January 09, 2014 07:14AM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

nano January 09, 2014 07:26AM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

Jonathan Matthews January 09, 2014 07:48AM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

nano January 09, 2014 08:20AM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

Jim Ohlstein January 09, 2014 10:22AM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

nano January 09, 2014 12:16PM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

Jim Ohlstein January 09, 2014 12:34PM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

nano January 09, 2014 12:48PM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

Maxim Dounin January 09, 2014 07:50AM

Re: Nginx as reverse Proxy, remove X-Frame-Options header

Maxim Dounin January 09, 2014 06:46AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 92
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready