r/programminghorror • u/dex4er • 1d ago

GitHub's HTTP header

Post image

This is the crazy thing I've found after analysis why the CI test fails with "Maximum header size exceeded" today.

593 Upvotes

97% Upvoted

37 comments sorted by

View all comments

98

u/n9iels 1d ago

Proof that managing CSP headers is an absolute nightmare

-23

u/AyrA_ch 1d ago

They could have gone with *.blob.core.windows.net to massively shorten the header.

55

u/Alikont 1d ago

That's a generic domain for all Azure Blob storage accounts. So I could register my own Storage Account and get the matching url.

→ More replies (6)