@@ -852,9 +852,10 @@ Alternatively, if you are serving a static file, you can use a
852852
853853The ``BinaryFileResponse `` will automatically handle ``Range `` and
854854``If-Range `` headers from the request. It also supports ``X-Sendfile ``
855- (see for `FrankenPHP `_, `nginx `_ and `Apache `_). To make use of it, you need to determine
856- whether or not the ``X-Sendfile-Type `` header should be trusted and call
857- :method: `Symfony\\ Component\\ HttpFoundation\\ BinaryFileResponse::trustXSendfileTypeHeader `
855+ (see `FrankenPHP X-Sendfile and X-Accel-Redirect headers `_,
856+ `nginx X-Accel-Redirect header `_ and `Apache mod_xsendfile module `_). To make use
857+ of it, you need to determine whether or not the ``X-Sendfile-Type `` header should
858+ be trusted and call :method: `Symfony\\ Component\\ HttpFoundation\\ BinaryFileResponse::trustXSendfileTypeHeader `
858859if it should::
859860
860861 BinaryFileResponse::trustXSendfileTypeHeader();
@@ -1076,9 +1077,9 @@ Learn More
10761077 /session
10771078 /http_cache/*
10781079
1079- .. _ FrankenPHP : https://frankenphp.dev/docs/x-sendfile/
1080- .. _ nginx : https://mattbrictson.com/blog/accelerated-rails-downloads
1081- .. _ Apache : https://tn123.org/mod_xsendfile/
1080+ .. _ `FrankenPHP X-Sendfile and X-Accel-Redirect headers` : https://frankenphp.dev/docs/x-sendfile/
1081+ .. _ `nginx X-Accel-Redirect header` : https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ignore_headers
1082+ .. _ `Apache mod_xsendfile module` : https://github.com/nmaier/mod_xsendfile
10821083.. _`JSON Hijacking` : https://haacked.com/archive/2009/06/25/json-hijacking.aspx/
10831084.. _`valid JSON top-level value` : https://www.json.org/json-en.html
10841085.. _OWASP guidelines : https://cheatsheetseries.owasp.org/cheatsheets/AJAX_Security_Cheat_Sheet.html#always-return-json-with-an-object-on-the-outside
0 commit comments