How to allow dot (.) in headers

Website, Application, Performance Security
1

I have a legacy application that passes dot (.) in http headers (eg. my.header). I understand that cloudflare strips headers with dot. Is there away to allow such known headers with dot?

Thanks

3

It is a request header. An example would be R.2 as the header name.

4

Probably only with enterprise, if possible you should use headers with dashes instead, eg r-2. It’s also good practice to prepend x- to headers your application wants (as opposed to headers intended to control HTTP features), eg x-r2.

Here’s the background on why dashes are preferred Symfony can't read HTTP headers with dots · Issue #18003 · symfony/symfony · GitHub

5

This topic was automatically closed after 30 days. New replies are no longer allowed.