HTTP - tune requests

HTTP configuration to tune how TYPO3 behaves on HTTP requests made by TYPO3. See Guzzle documentation for more background information on many of those settings.

Note

The configuration values listed here are keys in the global PHP array $GLOBALS['TYPO3_CONF_VARS']['HTTP'].

This variable can be set in one of the following files:

allow_redirects , Type: mixed
- strict , Type: bool
- max , Type: int
allowed_hosts , Type: array / null
- webhooks , Type: array / null
cert , Type: mixed
connect_timeout , Type: int
proxy , Type: mixed
ssl_key , Type: mixed
timeout , Type: int
verify , Type: mixed
version , Type: text

allow_redirects

Type: mixed
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['allow_redirects']

Mixed, set to false if you want to disallow redirects, or use it as an array to add more configuration values (see below).

strict

Type: bool
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['allow_redirects']['strict']
Default: false

Whether to keep request method on redirects via status 301 and 302

TRUE: Strict RFC compliant redirects mean that POST redirect requests are sent as POST requests. This is needed for compatibility with RFC 2616)
FALSE: redirect POST requests with GET requests, needed for compatibility with most browsers

max

Type: int
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['allow_redirects']['max']
Default: 5

Maximum number of tries before an exception is thrown.

allowed_hosts

Type: array / null
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['allowed_hosts']

New in version 13.4.12 / 12.4.31

This property has been added with the security fix Important: #106229 - Allow filtering request hosts in webhook messages.

This option is not passed on to guzzle. Instead, it configures an array of allowed hosts to interact with TYPO3.

webhooks

Type: array / null
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['allowed_hosts']['webhooks']
Default: null

For now, the only supported array key is webhooks to configure an array of allowed hostnames that webhooks of EXT:webhooksare allowed to connect to (see forge#106229 as a protection against DNS rebinding).

Wildcards in the array values are allowed, like *.example.com.

An empty array is allowed, but in that case it is better to actually remove the EXT:webhooks extension (all hosts are blocked).

Setting this option to null (or having it unset) is the default, and will allow any connection.

cert

Type: mixed
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['cert']
Default: null

Set to a string to specify the path to a file containing a PEM formatted client side certificate. See Guzzle option cert

connect_timeout

Type: int
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['connect_timeout']
Default: 10

Default timeout for connection in seconds. Exception will be thrown if connecting to a remote host

proxy

Type: mixed
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['proxy']
Default: null

Enter a single proxy server as string, for example 'proxy.example.org'

Multiple proxies for different protocols can be added separately as an array as authentication and port; see Guzzle documentation for details.

The configuration with an array must be made in the config/system/additional.php; see File config/system/additional.php for details.

ssl_key

Type: mixed
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['ssl_key']
Default: null

Local certificate and an optional passphrase, see Guzzle option ssl-key

timeout

Type: int
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['timeout']
Default: 0

Default timeout for whole request. Exception will be thrown if sending the request takes more than this number of seconds.

Should be greater than the connection timeout or 0 to not set a limit.

verify

Type: mixed
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['verify']
Default: true

Describes the SSL certificate verification behavior of a request, see Guzzle option verify

version

Type: text
Path: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['version']
Default: '1.1'

Default HTTP protocol version. Use either "1.0" or "1.1".