tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity

FIX: Remove X-Requested-With from default Vary header.

Browse Source 
The X-Requested-With header does modify the result of Director::is_ajax
and so this should strictly be in there. In practise, this can cause
issues with CDNs such as Incapsula, and LeftAndMain adds this vary
header itself, which is the principle place where Director::is_ajax
is used.
This commit is contained in:
Sam Minnee 2018-07-04 13:35:47 +12:00
parent 00a263092e
commit 9c9872ebac
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
_config/config.yml
View File

@ -16,7 +16,7 @@ HTTP:
no-cache: "true"
no-store: "true"
must-revalidate: "true"
vary: "X-Requested-With, X-Forwarded-Protocol"
vary: "X-Forwarded-Protocol"
LeftAndMain:
dependencies:
versionProvider: %$SilverStripeVersionProvider