Duplicate control-header / control-origin about nelmiocorsbundle HOT 10 CLOSED

I can confirm that if Nginx is also configured to send the CORS headers, there are duplicates created. I removed the Nginx CORS config and the bundle works as expected. An idea is to have the bundle check for the headers and create a warning if duplicates are present.

from nelmiocorsbundle.

Anyone have an idea ?? :s

from nelmiocorsbundle.

up, if someone have an idea ??

from nelmiocorsbundle.

up, i continue to search a solution .. If anyone have an idea

from nelmiocorsbundle.

last up, i didn't find any solution currently. I search about nginx configuration, may be its a conflict between nginx vhost and this bundle

from nelmiocorsbundle.

I can confirm that if Nginx is also configured to send the CORS headers, there are duplicates created. I removed the Nginx CORS config and the bundle works as expected. An idea is to have the bundle check for the headers and create a warning if duplicates are present.

Can confirm, had exactly same problem.

from nelmiocorsbundle.

+1
symfony: 5.4
nelmiocors: 2.2.0

from nelmiocorsbundle.

+1
Symfony: 5.3.15
Nelmiocors: 2.2.0

from nelmiocorsbundle.

The bundle is asf ar as I know never setting duplicate headers, so if you're +1ing here, please give more details or look at what else you have running in your application. Try to look in the symfony profiler for what event listeners you have running after the CorsListener. Do you have symfony http cache in place or something? Just adding +1 will not help anyone that's for sure.

from nelmiocorsbundle.

An idea is to have the bundle check for the headers and create a warning if duplicates are present.

The bundle cannot do this check, if you configure your web server to also send CORS headers back in the response what happens is this:

• web server gets a request
• forwards to php
• PHP runs, Symfony runs, NelmioCorsBundle adds headers
• web server gets back a response
• web server adds duplicate headers
• web server sends the response back to client

As you can see, the PHP code has no chance to ever see what the web server is doing, so cannot act on that. Only the server admins/application developers can do this. Please learn how your stack works.

from nelmiocorsbundle.