`header setifempty` unsupported?

phiw13

header setifempty unsupported?

What the headline says – in a .htaccess file setting (e.g.) header setifempty Content-Security-Policy "…" returns an error page.

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.

Apache error log

[Tue Apr 18 02:01:12.276455 2023] [core:alert] [pid 15067:tid 140543837316864] [client xxxx] /home/phiw-a/apps/lab/.htaccess: first argument must be 'add', 'set', 'append', 'merge', 'unset', 'echo', 'edit', or 'edit*'., referer: https://dev.l-c-n.com/

sean

phiw13 SetIfEmpty was introduced in Apache 2.4.7, but we're running 2.4.6 at this time. Because of this you're not able to use SetIfEmpty in your .htaccess directives.

You might be able to work around that with an If directive like so:

<If "-z req('Content-Security-Policy')">
    header set Content-Security-Policy "…"
</If>

Hope this helps 🙂

phiw13

Thanks. I will experiment with as soon as I can.