@@ -854,9 +854,10 @@ Alternatively, if you are serving a static file, you can use a
854854
855855The ``BinaryFileResponse `` will automatically handle ``Range `` and
856856``If-Range `` headers from the request. It also supports ``X-Sendfile ``
857- (see for `FrankenPHP `_, `nginx `_ and `Apache `_). To make use of it, you need to determine
858- whether or not the ``X-Sendfile-Type `` header should be trusted and call
859- :method: `Symfony\\ Component\\ HttpFoundation\\ BinaryFileResponse::trustXSendfileTypeHeader `
857+ (see `FrankenPHP X-Sendfile and X-Accel-Redirect headers `_,
858+ `nginx X-Accel-Redirect header `_ and `Apache mod_xsendfile module `_). To make use
859+ of it, you need to determine whether or not the ``X-Sendfile-Type `` header should
860+ be trusted and call :method: `Symfony\\ Component\\ HttpFoundation\\ BinaryFileResponse::trustXSendfileTypeHeader `
860861if it should::
861862
862863 BinaryFileResponse::trustXSendfileTypeHeader();
@@ -1061,9 +1062,9 @@ Learn More
10611062 /session
10621063 /http_cache/*
10631064
1064- .. _ FrankenPHP : https://frankenphp.dev/docs/x-sendfile/
1065- .. _ nginx : https://mattbrictson.com/blog/accelerated-rails-downloads
1066- .. _ Apache : https://tn123.org/mod_xsendfile/
1065+ .. _ `FrankenPHP X-Sendfile and X-Accel-Redirect headers` : https://frankenphp.dev/docs/x-sendfile/
1066+ .. _ `nginx X-Accel-Redirect header` : https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ignore_headers
1067+ .. _ `Apache mod_xsendfile module` : https://github.com/nmaier/mod_xsendfile
10671068.. _`JSON Hijacking` : https://haacked.com/archive/2009/06/25/json-hijacking.aspx/
10681069.. _`valid JSON top-level value` : https://www.json.org/json-en.html
10691070.. _OWASP guidelines : https://cheatsheetseries.owasp.org/cheatsheets/AJAX_Security_Cheat_Sheet.html#always-return-json-with-an-object-on-the-outside
0 commit comments