What headers are automatically sent by wget?
Using the -d (–debug) option I see it set: —request begin— GET / HTTP/1.0 User-Agent: Wget/1.12 (cygwin) Accept: */* Host: www.uml.edu Connection: Keep-Alive —request end—
http-headers
Is it possible to send a 401 Unauthorized AND redirect (with a Location)?
By definition (see RFC 2616), the HTTP 302 response code is the redirect code. Without it, the location header may be ignored. However, you can send an HTTP 401 response and still display output. Instead of redirecting the user to an error page, you could simply write your content you want to send in the … Read more
Difference between CSRF and X-CSRF-Token
CSRF protection comes in a number of methods. The traditional way (the “Synchronizer token” pattern) usually involves setting a unique valid Token value for each request and then verifying that unique value when the request is subsequently sent in. It is usually done by setting a hidden form field. The token value is usually short … Read more
Cannot handle 302 redirect in ajax and why? [duplicate]
You shouldn’t redirect the call when it’s an XHR but respond with a 401 Unauthorized and handle this in your callbacks. I don’t know ASP.NET but I did something similar with Spring Security. Heres the concept: Get the authenticated state Check the headers for X-Requested-With: XMLHttpRequest When found and not authenticated respond with 401 Unauthorized … Read more
What is the average size of an HTTP request/response header?
From Google’s SPDY research project whitepaper Uncompressed request and response headers. Request headers today vary in size from ~200 bytes to over 2KB. As applications use more cookies and user agents expand features, typical header sizes of 700-800 bytes is common.
Should HTTP 304 Not Modified-responses contain cache-control headers?
RFC7232 updates RFC2616 to say: The server generating a 304 response MUST generate any of the following header fields that would have been sent in a 200 (OK) response to the same request: Cache-Control, Content-Location, Date, ETag, Expires, and Vary.
Parsing HTTP User-Agent string
I finally decided to write my own, and I am happy with the outcome. Please feel free to use/modify/send me patches, etc. It’s here: http://pypi.python.org/pypi/httpagentparser Usage example: >>> import httpagentparser >>> s = “Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/532.9 (KHTML, like Gecko) \ Chrome/5.0.307.11 Safari/532.9” >>> print(httpagentparser.simple_detect(s)) (‘Linux’, ‘Chrome 5.0.307.11’) >>> print(httpagentparser.detect(s)) {‘os’: {‘name’: … Read more
How to properly use Bearer tokens?
1.Improving the security because if token is not sent in the header that sent in url, it will be logged by the network system, the server log …. 2.A good function to get Bearer tokens /** * Get header Authorization * */ function getAuthorizationHeader(){ $headers = null; if (isset($_SERVER[‘Authorization’])) { $headers = trim($_SERVER[“Authorization”]); } else … Read more
HTTP “Content-Disposition: attachment” and downloading files on iOS web browser
The mobile Safari browser doesn’t support downloading files. If Safari can display it, it will display. If you have installed other apps that can open the file, Safari will detect it for you.
Operating System from User-Agent HTTP Header [closed]
Here’s a quick list… let me know if I missed one you are interested in. http://www.geekpedia.com/code47_Detect-operating-system-from-user-agent-string.html: // Match user agent string with operating systems Windows 3.11 => Win16, Windows 95 => (Windows 95)|(Win95)|(Windows_95), Windows 98 => (Windows 98)|(Win98), Windows 2000 => (Windows NT 5.0)|(Windows 2000), Windows XP => (Windows NT 5.1)|(Windows XP), Windows Server 2003 … Read more