Skip to content

Conversation

@freesteph
Copy link

du commit 📖 :

OGO has a mechanism to prevent request looping on their server: if a request comes back with a certain header stamped (X-OGO-Shield), they abort the request with a code 508 since it's come up before.

In our case, we're fine because it's not exactly the same request:

1. the backend receives a call on `mobilic.beta.gouv.fr/api`
2. re-issues the same request on `api.mobilic.beta.gouv.fr`.

The engineer at OGO (thanks Arnaud) suggested removing this custom header to make sure OGO doesn't break the request chain with a 508 error.

OGO has a mechanism to prevent request looping on their server: if a
request comes back with a certain header stamped (X-OGO-Shield), they
abort the request with a code 508 since it's come up before.

In our case, we're fine because it's not exactly the same request:

1. the backend receives a call on `mobilic.beta.gouv.fr/api`
2. re-issues the same request on `api.mobilic.beta.gouv.fr`.

The engineer at OGO (thanks Arnaud) suggested removing this custom
header to make sure OGO doesn't break the request chain with a 508
error.
@sonarqubecloud
Copy link

@tristanrobert
Copy link
Contributor

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants