esi-test-server-docker icon indicating copy to clipboard operation
esi-test-server-docker copied to clipboard

esi:include using https:// urls are requested using http://

Open GromNaN opened this issue 2 years ago • 1 comments

Using Akamai, I can include a page using HTTPS.

<esi:include src="https://www.example.com/_esi/header"/>

For such ESI tag, ETS tries to make a request using http. This is not working for me since my backend server has a redirection from http:// to https://.

There is a sentence in the readme that seems to be an answer, but I expect https:// urls to be requested using HTTPS.

ETS strips Content-Security-Policy headers to enable support for proxying HTTPS origins via HTTP.

GromNaN avatar Jul 06 '22 21:07 GromNaN

I came across the same issue. ESI includes referenced by https are fetched using http. The origin server have http to https redirect set up. The redirect propagates to the template in which esi tag was inserted and the user is redirected to the url from esi:include src. Furthermore this causes ERR_RESPONSE_HEADERS_MULTIPLE_LOCATION if I use multiple esi:inlcude tags like this.

Is there any way to fix that?

bkoltoniak avatar Feb 14 '24 13:02 bkoltoniak