Re: X-Frame-Options: Nginx includes header twice

2014-01-28 Thread Jonathan Matthews
On 28 January 2014 11:04, Some Developer wrote: > If I could set arbitary headers in > Django then I could do it all there I know nothing about Django, but this would seem to be what you're asking for: https://docs.djangoproject.com/en/1.6/ref/request-response/#setting-header-fields J

Re: X-Frame-Options: Nginx includes header twice

2014-01-28 Thread Some Developer
On 27/01/2014 09:50, Jonathan Matthews wrote: On 27 January 2014 02:49, Some Developer wrote: Seems a bit strange to me that an application framework sets HTTP headers. Surely this should be left to the HTTP server? What are other peoples opinions on this? There are many instances where the a

Re: X-Frame-Options: Nginx includes header twice

2014-01-27 Thread Jonathan Matthews
On 27 January 2014 02:49, Some Developer wrote: > Seems a bit strange to me that an application framework sets HTTP headers. > Surely this should be left to the HTTP server? What are other peoples > opinions on this? There are many instances where the application is the most knowledgable layer re

Re: X-Frame-Options: Nginx includes header twice

2014-01-26 Thread Some Developer
On 25/01/2014 07:51, wishmaster wrote: --- Original message --- From: "Some Developer" Date: 25 January 2014, 06:04:10 I'm running Nginx 1.4.4 on Ubuntu 12.04 and have added the X-Frame-Options header for one of my sites but in testing it appears that Nginx includes this itself in

Re: X-Frame-Options: Nginx includes header twice

2014-01-24 Thread wishmaster
--- Original message --- From: "Some Developer" Date: 25 January 2014, 06:04:10 > I'm running Nginx 1.4.4 on Ubuntu 12.04 and have added the X-Frame-Options > header for one of my sites but in testing it appears that Nginx includes this > itself in addition to user configured headers

X-Frame-Options: Nginx includes header twice

2014-01-24 Thread Some Developer
I'm running Nginx 1.4.4 on Ubuntu 12.04 and have added the X-Frame-Options header for one of my sites but in testing it appears that Nginx includes this itself in addition to user configured headers. Basically I want X-Frame-Options to be DENY but when I set that header Nginx also sends an X-Fr