[go: up one dir, main page]

DEV Community

#http

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
One add_header in a location deletes every header above it

One add_header in a location deletes every header above it

Comments
6 min read
Handling Legacy Domain Requests on a Static Site with 301 and 410

Handling Legacy Domain Requests on a Static Site with 301 and 410

Comments
2 min read
You fixed the link, but it's still broken: how cached 404s and redirects outlive your fix

You fixed the link, but it's still broken: how cached 404s and redirects outlive your fix

Comments
5 min read
The Four Origins a Cold Load Reaches, and the Two the Document Never Names

The Four Origins a Cold Load Reaches, and the Two the Document Never Names

Comments
4 min read
The 90-Day Cookie: What the One Cookie Our API Sets Actually Says, and the Sibling Route That Sets Nothing

The 90-Day Cookie: What the One Cookie Our API Sets Actually Says, and the Sibling Route That Sets Nothing

Comments
4 min read
Our API Host Does Not Have One Rate Limit, It Has Two: 1200 on 7 Routes and 600 on 1 - and the Concurrency Counter Never Moves

Our API Host Does Not Have One Rate Limit, It Has Two: 1200 on 7 Routes and 600 on 1 - and the Concurrency Counter Never Moves

Comments
3 min read
Running six AI agent subtasks at once took 55 seconds longer than running them one at a time

Running six AI agent subtasks at once took 55 seconds longer than running them one at a time

Comments
8 min read
The Host Header Layer of app.onepassapps.com: One 403, One 301, One 404 and One 530 From the Same URL

The Host Header Layer of app.onepassapps.com: One 403, One 301, One 404 and One 530 From the Same URL

Comments
5 min read
What the Accept Header Decides on Our Own Site: Cloudflare's Beacon Tag Rides In or Out, and the API Host That Ignores It

What the Accept Header Decides on Our Own Site: Cloudflare's Beacon Tag Rides In or Out, and the API Host That Ignores It

Comments
4 min read
We Advertised HTTP/3 and Never Tested It: 9 Answers Over QUIC, One More Server-Timing Line, and a Dropped Priority Header

We Advertised HTTP/3 and Never Tested It: 9 Answers Over QUIC, One More Server-Timing Line, and a Dropped Priority Header

Comments
4 min read
The Hash Rotated: Our Own CSP Names a Different Inline Script Than It Did on 8 November

The Hash Rotated: Our Own CSP Names a Different Inline Script Than It Did on 8 November

Comments
4 min read
The One Header on All 56 Pages That Belongs to a Plugin Runtime: x-permitted-cross-domain-policies

The One Header on All 56 Pages That Belongs to a Plugin Runtime: x-permitted-cross-domain-policies

Comments
3 min read
The Browser Side of Cross-Origin Isolation on app.onepassapps.com: No SharedArrayBuffer, and a Clock That Steps in 0.1 ms

The Browser Side of Cross-Origin Isolation on app.onepassapps.com: No SharedArrayBuffer, and a Clock That Steps in 0.1 ms

Comments
4 min read
Two Server-Timing Lines on Every Response: What Our Own Host Sends Twice, and Why Your Parser Shows You One

Two Server-Timing Lines on Every Response: What Our Own Host Sends Twice, and Why Your Parser Shows You One

Comments
3 min read
Eight Named, One Delivered: The Expose List on Our API Host and the Route That Proves It

Eight Named, One Delivered: The Expose List on Our API Host and the Route That Proves It

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.