Skip to content

Outdated X-Forwarded-Protocol header is referenced #11973

@GuySartorelli

Description

@GuySartorelli

The X-Forwarded-Protocol header is a very old non-standard header name. The modern equivalent is X-Forwarded-Proto.

We should find all references to the outdated header and at the very least update them to the modern equivalent.

This outdated header is at the very least referenced in HTTPCacheControlMiddleware as a default header to include in the Vary header.

Note that https://docs.silverstripe.org/en/6/developer_guides/performance/http_cache_headers/#vary details a way to change the Vary header which doesn't relate to the HTTPCacheControlMiddleware.defaultVary configuration, so this documentation should be reviewed as well.

Acceptance criteria

  • Where appropriate, update references from X-Forwarded-Protocol to X-Forwarded-Proto
  • Review usage of the header to see if it's still appropriate
    e.g. If it should not be in the Vary header by default, remove it from the HTTPCacheControlMiddleware.defaultVary configuration
  • Review documentation referencing X-Forwarded-Protocol and update it as appropriate
  • Review documentation referencing the Vary header and update it as appropriate

PRs

Metadata

Metadata

Assignees

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions