https://bugzilla.wikimedia.org/show_bug.cgi?id=41731

--- Comment #15 from Mark Bergsma <[email protected]> ---
(In reply to comment #13)
> (In reply to comment #11)
> > Indeed, our Squid config blocks OPTIONS requests. This is definitely
> > deliberate, with OPTIONS being explicitly singled out and seems to be there
> > for
> > many years.
> > I'll ask around to find out the rationale behind it -- please do as well,
> > Brion
> > might remember :) We need to find out soon anyway, since we're the Varnish
> > switch is imminent.
> 
> If i recall correctly, we put that in to block all the WebDAV requests
> hitting
> the Squids from also busting through to the Apaches, for no need.
> 
> I suppose we can open up the OPTIONS method for the API (only).

I've just deployed the following change in the Squid config:

 -http_access deny options
 +http_access deny options !api_php

So Squid should accept OPTIONS now, for ^/w/api.php requests only.

I'll work on a corresponding change for Varnish as well.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to