Re: [users@httpd] Stupid question on mod_header

2021-10-11 Thread Martin Knoblauch
On Wed, Oct 6, 2021 at 8:58 PM Konstantin Kolinko wrote: > ср, 6 окт. 2021 г. в 13:10, Martin Knoblauch : > > > > Hi, > > > > sorry for asking this likely stupid question. This is with Apache HTTPD > 2.4.48. > > > > I want to change the value of the X-Frame-Options response header from > DENY to

Re: [users@httpd] Stupid question on mod_header

2021-10-06 Thread Konstantin Kolinko
ср, 6 окт. 2021 г. в 13:10, Martin Knoblauch : > > Hi, > > sorry for asking this likely stupid question. This is with Apache HTTPD > 2.4.48. > > I want to change the value of the X-Frame-Options response header from DENY > to SAMEORIGIN. The header is apparently set by Tomcat 9.0.53. > > Naively

Re: [users@httpd] Stupid question on mod_header

2021-10-06 Thread Daniel Ferradal
Probably because the header is being added later in a different sub-context. That is, at the time apache sets the header for virtual host there is no other header of the same name defined, so there is nothing to eliminate and set instead, but then the path for the reverse proxy to tomcat is being

[users@httpd] Stupid question on mod_header

2021-10-06 Thread Martin Knoblauch
Hi, sorry for asking this likely stupid question. This is with Apache HTTPD 2.4.48. I want to change the value of the X-Frame-Options response header from DENY to SAMEORIGIN. The header is apparently set by Tomcat 9.0.53. Naively, because the mod_header documentation says "The response header i