We're dealing with a legacy application that emitted an HTML blurb. This HTML blurb was previously consumed by a web browser. Now we're turning (a new instance of) it into a service and bringing it into the intranet, inside the corporate firewall to be consumed by automated clients.
The code was returning HTTP Code 200 OK for Not Found situations, alongside with some HTML explaining that the information could not be found. We're considering returning a 404 Not Found code, but we want some way to tell responses from the application and from the web server apart (in case something gets misconfigured and the app can no longer be reached).
Now we get to the meat of the question: should we change de X-Powered-By header in the application? Do web servers and proxies respect that? We can certainly test our current web server. But can we count on future server updates/changes to respect this behaviour? Is this header governed by any spec (RFC, etc.)?
Aucun commentaire:
Enregistrer un commentaire