@@ -837,9 +837,10 @@ Alternatively, if you are serving a static file, you can use a
837837
838838The ``BinaryFileResponse `` will automatically handle ``Range `` and
839839``If-Range `` headers from the request. It also supports ``X-Sendfile ``
840- (see for `FrankenPHP `_, `nginx `_ and `Apache `_). To make use of it, you need to determine
841- whether or not the ``X-Sendfile-Type `` header should be trusted and call
842- :method: `Symfony\\ Component\\ HttpFoundation\\ BinaryFileResponse::trustXSendfileTypeHeader `
840+ (see `FrankenPHP X-Sendfile and X-Accel-Redirect headers `_,
841+ `nginx X-Accel-Redirect header `_ and `Apache mod_xsendfile module `_). To make use
842+ of it, you need to determine whether or not the ``X-Sendfile-Type `` header should
843+ be trusted and call :method: `Symfony\\ Component\\ HttpFoundation\\ BinaryFileResponse::trustXSendfileTypeHeader `
843844if it should::
844845
845846 BinaryFileResponse::trustXSendfileTypeHeader();
@@ -1061,9 +1062,9 @@ Learn More
10611062 /session
10621063 /http_cache/*
10631064
1064- .. _ FrankenPHP : https://frankenphp.dev/docs/x-sendfile/
1065- .. _ nginx : https://mattbrictson.com/blog/accelerated-rails-downloads
1066- .. _ Apache : https://tn123.org/mod_xsendfile/
1065+ .. _ `FrankenPHP X-Sendfile and X-Accel-Redirect headers` : https://frankenphp.dev/docs/x-sendfile/
1066+ .. _ `nginx X-Accel-Redirect header` : https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ignore_headers
1067+ .. _ `Apache mod_xsendfile module` : https://github.com/nmaier/mod_xsendfile
10671068.. _`JSON Hijacking` : https://haacked.com/archive/2009/06/25/json-hijacking.aspx/
10681069.. _`valid JSON top-level value` : https://www.json.org/json-en.html
10691070.. _OWASP guidelines : https://cheatsheetseries.owasp.org/cheatsheets/AJAX_Security_Cheat_Sheet.html#always-return-json-with-an-object-on-the-outside
0 commit comments