Drupal is a registered trademark of Dries Buytaert
drupal 11.3.7 Update released for Drupal core (11.3.7)! drupal 11.2.11 Update released for Drupal core (11.2.11)! drupal 10.6.7 Update released for Drupal core (10.6.7)! drupal 10.5.9 Update released for Drupal core (10.5.9)! cms 2.1.1 Update released for Drupal core (2.1.1)! drupal 11.3.6 Update released for Drupal core (11.3.6)! drupal 10.6.6 Update released for Drupal core (10.6.6)! cms 2.1.0 Update released for Drupal core (2.1.0)! bootstrap 8.x-3.40 Minor update available for theme bootstrap (8.x-3.40). menu_link_attributes 8.x-1.7 Minor update available for module menu_link_attributes (8.x-1.7). eca 3.1.1 Minor update available for module eca (3.1.1). layout_paragraphs 2.1.3 Minor update available for module layout_paragraphs (2.1.3). ai 1.3.3 Minor update available for module ai (1.3.3). ai 1.2.14 Minor update available for module ai (1.2.14). node_revision_delete 2.0.3 Minor update available for module node_revision_delete (2.0.3). moderated_content_bulk_publish 2.0.52 Minor update available for module moderated_content_bulk_publish (2.0.52). klaro 3.0.10 Minor update available for module klaro (3.0.10). klaro 3.0.9 Minor update available for module klaro (3.0.9). layout_paragraphs 2.1.2 Minor update available for module layout_paragraphs (2.1.2). geofield_map 11.1.8 Minor update available for module geofield_map (11.1.8).

debug_headers

No security coverage
View on drupal.org

This module helps to spot that headers are created correctly on reverse proxy systems. By printing out the headers in a block you can look at issues with caused by not sending the correct headers to Drupal.

For example, when using reverse proxy services or CDNs you will probably want the X-Forwarded-Host header to be sent by the service so that Drupal can respond with the correct domain.

Features

Currently only adds a block that shows the available headers for the page.

This header block can render as HTML comments in order to hide the headers from view. There are some security concerns in doing this so you should only do this if you really need to.

Post-Installation

- Install the module as normal.
- Give the user roles you want to allow access to the sessions page the
permission "view debug headers block".
- Add the Debug Headers block to a page or pages that you want to test.
- When you visit the page you will see a list of the headers reported by the
application.

Similar projects

trusted_proxy_headers_debug - Adds a single page that allows the headers to be viewed, along with a few other reverse proxy settigns.

Supporting this Module

Support the development of this module through Patreon or www.hashbangcode.com

Community Documentation

To follow.

Activity

Total releases
1
First release
Jun 2025
Latest release
9 months ago
Release cadence
Stability
0% stable

Releases

Version Type Release date
1.0.x-dev Dev Jun 27, 2025