Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...DNN 7.1 Need to remove Location HTTP response headerDNN 7.1 Need to remove Location HTTP response header
Previous
 
Next
New Post
1/29/2014 3:54 AM
 
Hi,

We have our own DNN module and page with this DNN module. 
We have traced HTTP response and have found that it contains Location HTTP response header, which we wanted to exclude from the HTTP response headers.

We have tried to remove that header programmatically within code behind of module (the View.ascx.cs), but at this header is not in the list of headers.
Probably, we should do it in some another stage of lifecycle.

So, the question is that is it possible to remove desired HTTP Response header (and any other headers) by using DNN settings or maybe there is some programmatic way?
And when this particular header adds to the list of headers?

Best Regards
 
New Post
1/29/2014 8:52 AM
 
the location header is used for redirects(http://en.wikipedia.org/wiki/HTTP_loc...) which are very common in asp.net e.g. response.redirect's after a page has a postback event processed on it. Stripping the location header will likely break functionality, I'm not sure why you would want to do that.

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
1/30/2014 2:49 AM
 
Hi Cathal,

Thank you for the response.
I now how and for what Location header could be used, but my question not about that.

We have our own site hosted under DNN and we do not use that header.
We have load balancer and nodes behind that and Location HTTP response header contains internal IP address of node behind the load the balancer.
Such kind of exposing could be potential security vulnerability which we want to avoid.

Best Regards
 
New Post
10/14/2014 12:48 PM
 

Was there ever a solution to this? I have to remove the location header in order to achieve PCI compliance so this is pretty important to me.

 
New Post
10/14/2014 4:50 PM
 
no as any solution would break asp.net's functionality - I also find it hard to believe that pci compliance would want this as the location header is used for standard redirects - a quick google does not show any such requirement (https://www.google.co.uk/#q=pci+compl...) can you please point me in the direction of where this is required.

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...DNN 7.1 Need to remove Location HTTP response headerDNN 7.1 Need to remove Location HTTP response header


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.

Content Layout

Subscribe to DNN Digest

Subscribe to DNN Digest

DNN Digest is our monthly email newsletter. It highlights news and content from around the DNN ecosystem, such as new modules and themes, messages from leadership, blog posts and notable tweets. Keep your finger on the pulse of the ecosystem by subscribing.  


Copyright 2017 by DNN Corp Terms of Use Privacy
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out