3 ms·
Another one is that it's technically valid to have a request target of '*' for the HTTP OPTIONS request type. It's supposed to return general information about
by anaphor 6y ago
Another one is that it's technically valid to have a request target of '*' for the HTTP OPTIONS request type. It's supposed to return general information about the whole server. You can try it out with e.g. `curl -XOPTIONS http://google.com http://google.com --request-target '*'`
Nginx gives you a 400 Bad Request response, Apache does nothing, and other servers vary in whether they return a non-error code.
https://curl.se/mail/lib-2016-08/0167.html https://curl.se/mail/lib-2016-08/0167.html
https://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html https://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html
- bch 6y agoI’m trying this out of curiosity, but getting (e.g.): HTTP/1.0 400 Invalid HTTP Request My mistake, or are there other working end-points out there (I tried google, yahoo, and cbc.ca)?