Header duplication when using WordPress LSCache plugin

Resolved

(@zoneee)

I have added headers to the context of openlitespeed for ‘/’, but I see duplication in the response. If I go to the toolbox and do a “Purge All – LSCache”, the duplication disappears on the subsequent request and then it comes back once the cache gets generated. This duplication appears with a ‘,’ and this is causing mangling of the headers for applications that are looking for certain values.

Server:
ii openlitespeed 1.6.21-2+focal amd64

LS Cache Plugin: Version 3.6.4

Has anyone seen this before?

< access-control-accept: *,*
< access-control-allow-credentials: true,true
< access-control-allow-headers: Origin,Content-Type,Accept,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Origin,Content-Type,Accept,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control
< access-control-allow-methods: GET,POST,OPTIONS,DELETE,PUT,GET,POST,OPTIONS,DELETE,PUT
< access-control-content-type: *,*
< access-control-max-age: 1728000,1728000
< strict-transport-security: max-age=31536000; includeSubDomains,max-age=31536000; includeSubDomains
< x-content-security-policy: default-src *,default-src *
< x-content-type-options: nosniff,nosniff
< x-frame-options: SAMEORIGIN,SAMEORIGIN
< x-xss-protection: 1; mode=block,1; mode=block
< x-litespeed-cache: hit

Viewing 4 replies - 1 through 4 (of 4 total)

Plugin Support

qtwrk

(@qtwrk)

5 years ago

Hi,

What did you add in context ?

if you disable cache plugin , it doesn’t duplicate ?

Best regards,

Thread Starter

zoneee

(@zoneee)

5 years ago

Under ‘Header Operations’ in the ‘Context’ tab, I have:

Header always edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure;SameSite=Strict
Header always edit Set-Cookie ^(.*)$ $1;SameSite=None;Secure
Header always set Access-Control-Accept "*"
Header always set Access-Control-Allow-Credentials true
Header always set Access-Control-Allow-Headers: "Origin,Content-Type,Accept,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control"
Header always set Access-Control-Allow-Methods: "GET,POST,OPTIONS,DELETE,PUT"
Header always set Access-Control-Content-Type "*"
Header always set Access-Control-Max-Age 1728000
Header always unset X-Powered-By
Header always unset server
Header always unset x-redirect-by
Header set P3P "CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'"    
Header set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS
Header set X-Content-Security-Policy "default-src *"
Header set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options SAMEORIGIN
Header set X-XSS-Protection "1; mode=block"

and no duplication after disabling the litespeed cache plugin.

Plugin Support

qtwrk

(@qtwrk)

5 years ago

Hi,

this is more like server-side issue instead of plugin-side

please create a ticket by mail to support at litespeedtech.com

Best regards,

Thread Starter

zoneee

(@zoneee)