Is safe to use “X-…” header in a HTTP response?
问题 I have to pass a meta-information in my HTTP response so I figured out that I could use the response header, for instance "X-MyData: 123456". Is that safe? I mean, there is a possibility that a client proxy remove this header? Thanks! 回答1: A client proxy could do anything it wanted, but in general would not strip any headers. Headers starting with an X- are typically reserved for nonstandard usage (i.e. no future standard will introduce a header starting X-) but a proxy may understand them