fatfree
fatfree copied to clipboard
bcosca
Default Headers
I have a problem with the default headers (especially the 'X-XSS-Protection: 1; mode=block' one) since they are included in my server configuration which means the headers are duplicated (added once from nginx and once from app).
Is there a way to disable the default headers ?
There's no option to disable it. You have to remove it manually from the base.php
https://github.com/bcosca/fatfree/blob/master/lib/base.php#L1050
Same here. Since i'm using fatfree via composer, modifying the core code is not ideal.
Since the header function is called with $replace parameter set to TRUE, it shouldn't be a problem, should it?
well, maybe the header is not yet set when the code runs, but is added before flushing any output through the webserver. Is there is any option in nginx to check for existence of this header?
