A WAF we are using is blocking responses from our webserver because of “Malformed HTTP-Header”.
I suspect it is because of a “content-disposition” header set by the spring framework.
The header is looking like this: content-disposition: inline;filename=f.txt.
What is the problem with this? Is a space after the semicolon required?
I compared the HTTP-Headers of the blocked response with the Headers of other responses.
By this I came to the conclusion, that the issue must be with the “content-disposition” header.
New contributor
nfree is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.