Comments (9)
It doesn't look like removing the headers sent by S3 is possible in AWS, so I would lean towards stripping the headers via Fastly when we serve them using custom VCL:
sub vcl_deliver {
remove resp.http.X-Whatever;
}
from grid.
@theefer I need a Fastly account to do this though π
from grid.
I'm afk at (sic), can you ask Jonathan Westlake or Rob Carey?
from grid.
*atm
from grid.
Fixed by: https://github.com/guardian/grid-infra/pull/27/files
from grid.
Great!
Can we get frontend to apply the same fix to their Fastly config as part of this (or as a new issue, I don't mind)?
from grid.
@theefer yup, just trying to find the correct vcl to PR against in the repo.
from grid.
Talking to @phamann we agreed that simply adding the custom rules to the Fastly UI was suitable given that they hope to be using ImagIX which strips the headers fairly soon. I've added the rules and the the X-amz-meta headers have disappeared :)
To test:
curl -D - -s -H Host:i.guim.co.uk d.global-ssl.fastly.net/media/w-700/h--/q-95/f3e2ecf2c008761657d11f069a57b94b5598237c/0_151_4016_2409/1000.jpg -o /dev/null
Current output:
HTTP/1.1 200 OK
Content-Type: image/jpeg
ETag: "1ddc68c67df5746e8f113da77a590d69"
Last-Modified: Wed, 01 Apr 2015 23:51:23 GMT
Server: nginx
Content-Length: 111293
Accept-Ranges: bytes
Date: Thu, 02 Apr 2015 10:26:12 GMT
Via: 1.1 varnish
Age: 1339
Connection: keep-alive
X-Served-By: cache-lcy1134-LCY
X-Cache: HIT
X-Cache-Hits: 24
X-Timer: S1427970372.534740,VS0,VE0
Vary: Accept, Accept-Encoding
from grid.
Amazing! π
from grid.
Related Issues (20)
- Add pluggable usage rights configuration HOT 1
- introduce archive permission HOT 3
- Feature: Hide/Soft Delete/ Agency images HOT 9
- Download button on a crop downloads the original image instead of the crop HOT 1
- Shared URLs do not affect app state correctly HOT 1
- Inconsistent state when cropping a hi-res image failed because of timeout HOT 2
- Auto-link metadata keys from additional metadata section
- Reintroduce batch Collections operation via metadata panel
- When both Allow and Deny cropping leases are applied, Deny should win⦠HOT 2
- Fix People pills having defunct editing UI for unpermissioned users HOT 1
- users can undelete their own uploads, even if they were not the deleter
- Rationalise Location
- Active Deny cropping leases should be indicated in the browser
- Invalid imagery should be indicated as such in the browser
- Viewer doesnβt show checkered background for cutouts without `optimisedPng`
- Cropping PNG fails
- Add support for IPTC Subject Codes HOT 2
- new image-loader architecture HOT 4
- [feature] Agency picks HOT 1
- Scala Steward can not run on this repo until it allows building under Java 21
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from grid.