The HTTP headers are available in the Rack environment passed to your app: HTTP_ Variables: Variables corresponding to the client-supplied HTTP request headers (i.e., variables whose names begin with HTTP_). The presence or absence of these variables should correspond with the presence or absence of the appropriate HTTP header in the request. So the HTTP … Read more
The only one without an easy listed solution for was the “Server” header. I was able to remove it locally in IIS and in an Azure web site by adding this in the web.config <system.webServer> <security> <requestFiltering removeServerHeader=”true” /> </security> </system.webServer>
At the time of writing this, the current version of Tomcat 7 (7.0.41) has a built-in CORS filter http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#CORS_Filter
Just send the absolute path. The restriction to an absolute URI is a known defect in RFC 2616 and will be fixed in HTTPbis (see http://trac.tools.ietf.org/wg/httpbis/trac/ticket/185). Please note that RFC 7231 now includes relative URIs in the spec. See other answers for how to handle relative URIs.
[Here is the result of my research.] RFC 2616 clause 3.4 says the following: HTTP character sets are identified by case-insensitive tokens. The complete set of tokens is defined by the IANA Character Set registry [19]. charset = token The IANA Character Set registry is now maintained here. At the very top of this document … Read more
As i’m reading it, 415 Unsupported Media Type sounds like the most appropriate. From RFC 2616: 10.4.16 415 Unsupported Media Type The server is refusing to service the request because the entity of the request is in a format not supported by the requested resource for the requested method. Yeah, the text part says “media … Read more
If you are using Chrome Dev Tools, make sure you have “Disable cache (while DevTools is open)” unchecked. I was having issues with the “Access-Control-Max-Age” not being honored only to realize that I had that option checked.
As a general rule, you should not trust the HTTP Referer Header for any matter of importance, except for purely informative statistical analysis of who your visitors are or when looking for patterns of behaviour among the users of your own site. Under no circumstance it is advisable that you use this header for AAA … Read more
The problem was with the url. This connection was meant to be established over https and I was using http in the python script. Hence the issue.