Samuel Esposito wrote:
However, when my application generates a 304 http response (NOT
MODIFIED) and litespeed send it to the apache proxy, apache seems to
remove the header.
How did you make sure of this ?
If not already done, use some browser add-on (Fiddler2 for IE ?) or
Wireshark, and really make sure that this is what happens.
Is there a way to prevent apache from modifying my 304 responses?
Which version of Apache are you using ?
Now about the rest :
quote
Because this
web-application is integrated into another web application using an
iFrame, and because most of the users use IE 7.0, I have to set a P3P
CP="CAO PSA OUR" header in all http responses in order to maintain my
cookie on the browser.
unquote
I am really not competent to judge if the above is correct or not.
I have some doubts though, thinking about how cookies ought to work.
I never heard before of an obligation to set some P3P header to force a
browser to keep a cookie.
But anyway, looking at the HTTP RFC 2626, section "10.3.5 304 Not
Modified", it seems to say that the set of allowable HTTP headers for a
304 response is quite limited.
Might this not be a case where Apache follows the spec, and removes HTTP
headers that are not allowed, while IE doesn't follow the specs, and
expects such as header ?
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
" from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
