Skip to content

Support conditional compression #8239

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Mar 7, 2019
Merged

Support conditional compression #8239

merged 2 commits into from
Mar 7, 2019

Conversation

Tratcher
Copy link
Member

@Tratcher Tratcher commented Mar 6, 2019

#6925 @DamianEdwards @glennc @blowdart this allows ResponseCompression's EnableForHttps setting to be overridden per request (opt in or opt out). StaticFiles opts in by default.

@Tratcher Tratcher added this to the 3.0.0-preview4 milestone Mar 6, 2019
@Tratcher Tratcher self-assigned this Mar 6, 2019
@Tratcher Tratcher requested a review from JunTaoLuo March 6, 2019 18:10
@Tratcher Tratcher requested a review from jkotalik as a code owner March 6, 2019 18:10
@Tratcher
Copy link
Member Author

Tratcher commented Mar 6, 2019

@Tratcher
Copy link
Member Author

Tratcher commented Mar 6, 2019

@danroth27 @SteveSandersonMS this should directly improve Blazor

@Tratcher Tratcher force-pushed the tratcher/compress branch from c9678ae to 8f23484 Compare March 7, 2019 17:20
@Tratcher Tratcher merged commit 6db129a into master Mar 7, 2019
@Tratcher Tratcher deleted the tratcher/compress branch March 7, 2019 19:09
public enum HttpsCompressionMode
{
/// <summary>
/// No value has been specified, use the configured defaults.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a "default" default? I'm not sure where I'd look to find the "configured defaults". Is the default hard-coded, or implied somewhere such that we could document it here?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I.e. the global value at ResponseCompressionOptions.EnableForHttps


/// <summary>
/// Opts out of compression over HTTPS. Enabling compression on HTTPS requests for remotely manipulable content
/// may expose security problems.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there any canonical or at least permanent place we could direct folks for more information? Do we have examples of other API ref docs that warn about potential security problems that we can follow form on?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@amcasey amcasey added the area-middleware Includes: URL rewrite, redirect, response cache/compression, session, and other general middlewares label Jun 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area-middleware Includes: URL rewrite, redirect, response cache/compression, session, and other general middlewares
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants