Questions tagged [http-headers]

HTTP headers are the name or value pairs that are displayed in the request and response messages of message headers for Hypertext Transfer Protocol (HTTP).

Filter by
Sorted by
Tagged with
9
votes
2answers
5k views

What is the correct way to block all HTTP Headers (ASP.Net and SharePoint) from a particular web application extension?

I have been involved in two projects recently which have required the removal of all HTTP Headers which can identify the site as either an ASP.Net site or as a SharePoint site. This is normally as a ...
8
votes
1answer
13k views

“The XSS Auditor refused to execute a script in…” from Chrome when using <script> tag in content editor webpart

Embedding javascript in a content editor web part triggers XSS Auditor error in Chrome when editing any webpart on the page containing the content editor web part. Steps to reproduce 1 - Use newest ...
2
votes
0answers
755 views

Sharepoint app REST Authorization Header

I have developed a Sharepoint app that I installed on my sharepoint site for testing. I filled it with data and now I want to run REST queries on my app with Postman in Chrome. Once I am logged in to ...
1
vote
1answer
153 views

Copy major version of document to another library & preserve document history

This question keeps being asked with respect to different SharePoint versions. In my case I want copy a document from a 'working library' ( not searchable) to a published versions library, once it has ...
1
vote
1answer
80 views

How can i implement “Cache-Control: no-store” and either “Pragma: no-cache” or “Cache-Control: no-cache” response directives

So our security team had an investigation in our sharepoint site and one of the things they've mention is DESCRIPTION "The application does not implement “no-store” and/or “no-cache” setting for ...
1
vote
2answers
264 views

SP2013 Toolbar keeps loading invalid http json response headers for commandui.ashx

Dear smart people out there, we published SP2013 via UAG 2010 sp4. The toolbar keeps showing 'Loading ...' In javascript there is a Deserialization error. My http response for the commandui.ashx ...
0
votes
1answer
82 views

Strict-Transport-Security Header for SharePoint 2013

I'd like to add a HSTS header to our SharePoint 2013 Foundation on prem install, but can't seem to find a way to do this. I've seen a lot mention this in other questions - $wa = Get-...
0
votes
1answer
264 views

SharePoint 2013 REST no permission to POST siteuser

I am trying to POST new siteusers to <sp_url>/_api/web/sitegroups(6)/users. I have managed to do so using the chrome rest client application addon. The request contains following headers and ...
0
votes
1answer
29 views

Rest API Send Headers which are needed to be then returned by API

Is it possible to send Request-headers to SharePoint Rest API which will be then present with the same value in the response? Here is an example what I want to do: getUserId: function (loginName, ...
0
votes
1answer
176 views

Does Content Link within Content Editor Web Parts Leave a HTTP Referer?

Our SharePoint site has multiple Content Editor web parts that use Content Link to call ASP scripts on a different web server. Example: my-sharepoint.com/home.aspx has Content Editor web part #1. ...