Skip to content

Commit afc84e2

Browse files
committed
Update the links related to X-Sendfile and X-Accel-Redirect
1 parent 3f423d5 commit afc84e2

File tree

1 file changed

+7
-6
lines changed

1 file changed

+7
-6
lines changed

components/http_foundation.rst

+7-6
Original file line numberDiff line numberDiff line change
@@ -854,9 +854,10 @@ Alternatively, if you are serving a static file, you can use a
854854

855855
The ``BinaryFileResponse`` will automatically handle ``Range`` and
856856
``If-Range`` headers from the request. It also supports ``X-Sendfile``
857-
(see for `FrankenPHP`_, `nginx`_ and `Apache`_). To make use of it, you need to determine
858-
whether or not the ``X-Sendfile-Type`` header should be trusted and call
859-
:method:`Symfony\\Component\\HttpFoundation\\BinaryFileResponse::trustXSendfileTypeHeader`
857+
(see `FrankenPHP X-Sendfile and X-Accel-Redirect headers`_,
858+
`nginx X-Accel-Redirect header`_ and `Apache mod_xsendfile module`_). To make use
859+
of it, you need to determine whether or not the ``X-Sendfile-Type`` header should
860+
be trusted and call :method:`Symfony\\Component\\HttpFoundation\\BinaryFileResponse::trustXSendfileTypeHeader`
860861
if it should::
861862

862863
BinaryFileResponse::trustXSendfileTypeHeader();
@@ -1061,9 +1062,9 @@ Learn More
10611062
/session
10621063
/http_cache/*
10631064

1064-
.. _FrankenPHP: https://frankenphp.dev/docs/x-sendfile/
1065-
.. _nginx: https://mattbrictson.com/blog/accelerated-rails-downloads
1066-
.. _Apache: https://tn123.org/mod_xsendfile/
1065+
.. _`FrankenPHP X-Sendfile and X-Accel-Redirect headers`: https://frankenphp.dev/docs/x-sendfile/
1066+
.. _`nginx X-Accel-Redirect header`: https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ignore_headers
1067+
.. _`Apache mod_xsendfile module`: https://github.com/nmaier/mod_xsendfile
10671068
.. _`JSON Hijacking`: https://haacked.com/archive/2009/06/25/json-hijacking.aspx/
10681069
.. _`valid JSON top-level value`: https://www.json.org/json-en.html
10691070
.. _OWASP guidelines: https://cheatsheetseries.owasp.org/cheatsheets/AJAX_Security_Cheat_Sheet.html#always-return-json-with-an-object-on-the-outside

0 commit comments

Comments
 (0)