使用PHP / Apache剥离Canonical Link HTTP响应标头

Question

I am trying to output a HTTP header using PHP that specifies a canonical url as per Google's guidelines : Specify a canonical link in your HTTP header in the following format: 我正在尝试使用PHP输出一个HTTP标头，该标头根据Google的指南指定了规范网址：在HTTP标头中以以下格式指定规范链接：

Link: <http://www.example.com/downloads/white-paper.pdf>; rel="canonical"

However the response header is being stripped with result being 但是响应头被剥离，结果是

Link: ; rel="canonical"

As a test, I removed the left/right angle brackets, and the result is: 作为测试，我去掉了左/右尖括号，结果是：

Link: http://www.example.com/downloads/white-paper.pdf; rel="canonical"

Which makes me think some security measure (PHP/Apache/Apache module??) is seeing the header content as HTML and 'helping' by stripping it out. 这让我认为某些安全措施（PHP / Apache / Apache模块？）正在将标头内容视为HTML，并通过剥离将其“帮助”。

The reason the canonical needs to be specified in the headers and not simply in the <head> is that the document is a PDF. 需要在标题中而不是在<head>中指定规范的原因是该文档是PDF。

This is some test code to illustrate what I am doing: 这是一些测试代码来说明我在做什么：

<?php
header("link: <https://www.somedomain.com/>; rel=\"canonical\"");
print "this is a test";?>

The list of modules loaded in apache is: apache中加载的模块列表为：

core_module (static) log_config_module (static) logio_module (static) version_module (static) mpm_prefork_module (static) http_module (static) so_module (static) alias_module (shared) auth_basic_module (shared) authn_file_module (shared) authz_default_module (shared) authz_groupfile_module (shared) authz_host_module (shared) authz_user_module (shared) cgi_module (shared) deflate_module (shared) dir_module (shared) env_module (shared) expires_module (shared) mime_module (shared) negotiation_module (shared) pagespeed_module (shared) php5_module (shared) reqtimeout_module (shared) rewrite_module (shared) setenvif_module (shared) ssl_module (shared) status_module (shared) core_module（静态）log_config_module（静态）logio_module（静态）version_module（静态）mpm_prefork_module（静态）http_module（静态）so_module（静态）alias_module（共享）auth_basic_module（共享）authn_file_module（共享）authz_default_module（共享）authz_host_group_file共享）authz_user_module（共享）cgi_module（共享）deflate_module（共享）dir_module（共享）env_module（共享）expires_module（共享）mime_module（共享）谈判_模块（共享）pagespeed_module（共享）php5_module（共享）reqtimeout_module（共享） setenvif_module（共享）ssl_module（共享）status_module（共享）

Note that suhosin is not loaded, so that can be ruled out.. Any help identifying what could be modifying the header appreciated. 请注意，未加载suhosin，因此可以排除该问题。识别任何可能会修改标头的帮助都将受到赞赏。

Update: I have tried this on a few different servers, and the result is the same so far. 更新：我已经在一些不同的服务器上尝试过，到目前为止，结果是相同的。

Answer 1

The answer to this question is that the tools I was using to inspect the headers was inferior (probably not escaping the headers correctly before showing them as HTML): 这个问题的答案是，我用来检查标头的工具较差（在将标头显示为HTML之前，可能无法正确转义标头）：

Specifically Chrome extension "CDN Headers & Cookies" and some online checker I can no longer find. 特别是Chrome扩展程序“ CDN标头和Cookies”以及一些我无法找到的在线检查器。

Chrome's default F12 header inspector shows the responses headers correctly though, apologies if I wasted anyone's time. Chrome的默认F12标头检查器可正确显示响应标头，如果我浪费了任何时间，我深表歉意。

使用PHP / Apache剥离Canonical Link HTTP响应标头

问题描述

1 个解决方案

解决方案1
0 2017-03-13 09:04:23

使用PHP / Apache剥离Canonical Link HTTP响应标头

问题描述

1 个解决方案

解决方案1 0 2017-03-13 09:04:23

解决方案1
0 2017-03-13 09:04:23