CURLOPT_HTTPHEADER.3 6.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140
  1. .\" **************************************************************************
  2. .\" * _ _ ____ _
  3. .\" * Project ___| | | | _ \| |
  4. .\" * / __| | | | |_) | |
  5. .\" * | (__| |_| | _ <| |___
  6. .\" * \___|\___/|_| \_\_____|
  7. .\" *
  8. .\" * Copyright (C) 1998 - 2022, Daniel Stenberg, <[email protected]>, et al.
  9. .\" *
  10. .\" * This software is licensed as described in the file COPYING, which
  11. .\" * you should have received as part of this distribution. The terms
  12. .\" * are also available at https://curl.se/docs/copyright.html.
  13. .\" *
  14. .\" * You may opt to use, copy, modify, merge, publish, distribute and/or sell
  15. .\" * copies of the Software, and permit persons to whom the Software is
  16. .\" * furnished to do so, under the terms of the COPYING file.
  17. .\" *
  18. .\" * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
  19. .\" * KIND, either express or implied.
  20. .\" *
  21. .\" * SPDX-License-Identifier: curl
  22. .\" *
  23. .\" **************************************************************************
  24. .\"
  25. .TH CURLOPT_HTTPHEADER 3 "June 17, 2022" "libcurl 7.85.0" "curl_easy_setopt options"
  26. .SH NAME
  27. CURLOPT_HTTPHEADER \- set of HTTP headers
  28. .SH SYNOPSIS
  29. .nf
  30. #include <curl/curl.h>
  31. CURLcode curl_easy_setopt(CURL *handle, CURLOPT_HTTPHEADER,
  32. struct curl_slist *headers);
  33. .fi
  34. .SH DESCRIPTION
  35. Pass a pointer to a linked list of HTTP headers to pass to the server and/or
  36. proxy in your HTTP request. The same list can be used for both host and proxy
  37. requests!
  38. The linked list should be a fully valid list of \fBstruct curl_slist\fP
  39. structs properly filled in. Use \fIcurl_slist_append(3)\fP to create the list
  40. and \fIcurl_slist_free_all(3)\fP to clean up an entire list. If you add a
  41. header that is otherwise generated and used by libcurl internally, your added
  42. one will be used instead. If you add a header with no content as in 'Accept:'
  43. (no data on the right side of the colon), the internally used header will get
  44. disabled. With this option you can add new headers, replace internal headers
  45. and remove internal headers. To add a header with no content (nothing to the
  46. right side of the colon), use the form 'MyHeader;' (note the ending
  47. semicolon).
  48. The headers included in the linked list \fBmust not\fP be CRLF-terminated,
  49. because libcurl adds CRLF after each header item. Failure to comply with this
  50. will result in strange bugs because the server will most likely ignore part of
  51. the headers you specified.
  52. The first line in a request (containing the method, usually a GET or POST) is
  53. not a header and cannot be replaced using this option. Only the lines
  54. following the request-line are headers. Adding this method line in this list
  55. of headers will only cause your request to send an invalid header. Use
  56. \fICURLOPT_CUSTOMREQUEST(3)\fP to change the method.
  57. When this option is passed to \fIcurl_easy_setopt(3)\fP, libcurl will not copy
  58. the entire list so you \fBmust\fP keep it around until you no longer use this
  59. \fIhandle\fP for a transfer before you call \fIcurl_slist_free_all(3)\fP on
  60. the list.
  61. Pass a NULL to this option to reset back to no custom headers.
  62. The most commonly replaced headers have "shortcuts" in the options
  63. \fICURLOPT_COOKIE(3)\fP, \fICURLOPT_USERAGENT(3)\fP and
  64. \fICURLOPT_REFERER(3)\fP. We recommend using those.
  65. There's an alternative option that sets or replaces headers only for requests
  66. that are sent with CONNECT to a proxy: \fICURLOPT_PROXYHEADER(3)\fP. Use
  67. \fICURLOPT_HEADEROPT(3)\fP to control the behavior.
  68. .SH SPECIFIC HEADERS
  69. Setting some specific headers will cause libcurl to act differently.
  70. .IP "Host:"
  71. The specified host name will be used for cookie matching if the cookie engine
  72. is also enabled for this transfer. If the request is done over HTTP/2 or
  73. HTTP/3, the custom host name will instead be used in the ":authority" header
  74. field and Host: will not be sent at all over the wire.
  75. .IP "Transfer-Encoding: chunked"
  76. Tells libcurl the upload is to be done using this chunked encoding instead of
  77. providing the Content-Length: field in the request.
  78. .SH SECURITY CONCERNS
  79. By default, this option makes libcurl send the given headers in all HTTP
  80. requests done by this handle. You should therefore use this option with
  81. caution if you for example connect to the remote site using a proxy and a
  82. CONNECT request, you should to consider if that proxy is supposed to also get
  83. the headers. They may be private or otherwise sensitive to leak.
  84. Use \fICURLOPT_HEADEROPT(3)\fP to make the headers only get sent to where you
  85. intend them to get sent.
  86. Custom headers are sent in all requests done by the easy handles, which
  87. implies that if you tell libcurl to follow redirects
  88. (\fICURLOPT_FOLLOWLOCATION(3)\fP), the same set of custom headers will be sent
  89. in the subsequent request. Redirects can of course go to other hosts and thus
  90. those servers will get all the contents of your custom headers too.
  91. Starting in 7.58.0, libcurl will specifically prevent "Authorization:" headers
  92. from being sent to other hosts than the first used one, unless specifically
  93. permitted with the \fICURLOPT_UNRESTRICTED_AUTH(3)\fP option.
  94. Starting in 7.64.0, libcurl will specifically prevent "Cookie:" headers
  95. from being sent to other hosts than the first used one, unless specifically
  96. permitted with the \fICURLOPT_UNRESTRICTED_AUTH(3)\fP option.
  97. .SH DEFAULT
  98. NULL
  99. .SH PROTOCOLS
  100. HTTP
  101. .SH EXAMPLE
  102. .nf
  103. CURL *curl = curl_easy_init();
  104. struct curl_slist *list = NULL;
  105. if(curl) {
  106. curl_easy_setopt(curl, CURLOPT_URL, "https://example.com");
  107. list = curl_slist_append(list, "Shoesize: 10");
  108. list = curl_slist_append(list, "Accept:");
  109. curl_easy_setopt(curl, CURLOPT_HTTPHEADER, list);
  110. curl_easy_perform(curl);
  111. curl_slist_free_all(list); /* free the list */
  112. }
  113. .fi
  114. .SH AVAILABILITY
  115. As long as HTTP is enabled
  116. .SH RETURN VALUE
  117. Returns CURLE_OK if HTTP is supported, and CURLE_UNKNOWN_OPTION if not.
  118. .SH "SEE ALSO"
  119. .BR CURLOPT_CUSTOMREQUEST "(3), " CURLOPT_HEADEROPT "(3), "
  120. .BR CURLOPT_PROXYHEADER "(3), " CURLOPT_HEADER "(3)"