remove http response headers in zend

Question

I have a problem with an app in Zend Framework (1).

In a specific action I try to remove some headers but in response I still recieve those headers:

    $this->getResponse->clearAllHeaders()
                      ->clearRawHeaders();
    $this->getResponse->setHeader('A-Header', 'headervalue');

I expect the response to be:

    HTTP/1.1 XXX Some HTTP status code
    A-Header: headervalue

but it is:

   HTTP/1.1 XXX Some HTTP status code
   Date: Sun, 14 Apr 2013 16:26:59 GMT
   Server: Apache/2.2.16 (Debian)
   X-Powered-By: PHP/5.3.3-7+squeeze15
   Vary: Accept-Encoding
   Content-Length: 0
   Content-Type: text/html

How can I delete Date, Server, X-Powered-By, Vary, Content-Lenght, Content-Type? At least the Content* headers.

Thank you

Hi zavg. I tried to do this in several points - did that in a specific action, in postDispatch hook, in dispatchLoopShutdown hook. But without success... — Artur
– Artur, Commented Apr 14, 2013 at 17:11
Why do you want to do this? Apart from X-Powered-By, those headers each serve a purpose. — Tim Fountain
– Tim Fountain, Commented Apr 15, 2013 at 9:43
Hello Tim Fountain. I implement an authorization framework and the specs states that only several headers must be present. So I did not undersand well if I must strip out other headers... so in doubt I asked. BTW if there is a method (zned provides it) to remove a header... why I cannot remove it? At least the method should return some error code... nothing! Thank you! closing... — Artur
– Artur, Commented Apr 15, 2013 at 15:27

haim770 · Accepted Answer · 2016-01-14 19:17:27Z

7

Those headers are appended by Apache.

You can use mod_headers to control its behavior though:

http://httpd.apache.org/docs/2.2/mod/mod_headers.html

Example:

<IfModule mod_headers.c>
  Header unset Server
  Header unset X-Powered-By
</IfModule>

edited Jan 14, 2016 at 19:17

answered Apr 14, 2013 at 17:01

haim770

49.2k7 gold badges113 silver badges139 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

haim770 Over a year ago

You're gonna need mod_mime and use the RemoveType directive. but i'm not sure it will let you strip off the Date and Content-Length as those are required by HTTP standards.

haim770 Over a year ago

Also make sure you use ServerSignature Off and SeverTokens Prod.

Artur Over a year ago

Thank you. Did what you said and only X-Powered-By is stripped off. Also putting ServerSignature Off and ServerTokens Prod gave me the header Server: Apache. Without specifying what version it is.

Collectives™ on Stack Overflow

remove http response headers in zend

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related