Set Apache headers conditionally

13
votes

I'm working with an apache server, and I'd like to add headers conditionally.

If the URI matches a certain regex, I'd like to add the header Access-Control-Allow-Origin: *. What is a good way to do this?

What I've tried so far:

  1. I added code called by the request handler, using apr_table_add(rq->headers_out, "Access-Control-Allow-Origin", "*"). But it seems like Apache strips the header before sending the response whenever the header Content-Type: application/x-javascript is also set. Is this the wrong way to do it? Why would Apache strip the header?

  2. I've heard mod_headers suggested. Does mod_headers have the capability to place headers based on regex matching with the request URI?

2
apachehttp-headerscorsmod-headers
how did you solved the problem, did you say that you get the help from some colleagues? Please could you post the answer or the answer of @akond works? - Robert
The answer from @akond worked. - dinosaur

2 Answers

17
votes
SetEnvIf Request_URI somepartofurl SIGN
Header always add "Access-Control-Allow-Origin" "*" env=SIGN

but this works only if located in the configuration. Placing it into .htaccess won't help.

11
votes

This should also work (mod_rewrite is required):

RewriteRule ^/en/foo.*$ - [ENV=SET_ACAO:true]
Header set "Access-Control-Allow-Origin" "*" env=SET_ACAO

where ^/en/foo.*$ a regex which is matched against request URL