X-Original-URL and X-Rewrite-URL

Introduction Support of the X-Original-URL and X-Rewrite-URL headers lets users override the path in the request URL using the X-Original-URL or X-Rewrite-URL HTTP request header and allows a user to access one URL but have web application return a different URL, which can bypass restrictions on higher level caches and web servers. Resolution Log in to the Online Store node using SSH. Modify the 0ssl.conf file: vim /etc/httpd/conf.d/0ssl.conf Add the following lines to the section: RequestHeader unset X-Original-URL RequestHeader unset X-Rewrite-URL Save the changes. Restart the httpd service: service httpd restart