vphantom commented on issue #1154: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1154#issuecomment-764856757
I just dug a little deeper and actually ngx_pagespeed is removing all our custom headers from our responses, both those set with `add_header` and `more_set_headers`. This means when PageSpeed is enabled we lose STS, Referrer-Policy, X-XSS-Protection, Allow and even the Set-Cookie emitted by ngx_http_userid. We also lose ETag and Cache-Control (which were overwritten anyway) with `ModifyCacheHeaders off`. I can't believe we hadn't noticed that before today… 😕 Does nobody else in production need to set any header in Nginx? ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org
