php - Internal Forward in Silex Without a Sending a 301/302 to the Browser -

i'm using silex's internal forwarding map public urls internal urls i.e. my.domain.com/something serves my.domain.com/something_else using

$subrequest = request::create(     $redirect,     $method,      [], // params     $request->cookies->all(),      $request->files->all(),      $request->server->all() );  if ($request->getsession()) {     $subrequest->setsession($request->getsession()); }  return $app->handle($subrequest, httpkernelinterface::sub_request, true); 

however, in chrome's inspection tool, appears 301 resulting page, serves result. "by design" represents interesting security problem? there ways around limitation?

while can't post code something_else route controller, gist is

// controller provider $controller_factory->match('/something_else/{param}', function(...) {     include 'path/to/some/file'; }); 

and

// some/file - prepares file downloaded ... return new binaryfileresponse(); 

there no redirectresponses in file

edit on simplified in above example. in reality, /something random string (i.e. /abcdefghijklmnopqrstuvwxyz maps 1 of many internal routes (-> /something_else, -> /something_else_2, -> etc).

no, don't think so. believe something_else controller doesn't sub-request , returns redirect response, something controller unconditionally returns browser.

it can anything. silex micro-framework, means things can implemented in hundreds of different ways, , hardly possible advise without seeing actual code. flip side of flexibility brings. may redirectableurlmatcher, or in controller, router, included files, error handler or middleware, results redirect response.

consider more oversimplified single-script app example:

<?php // web/index.php require_once __dir__.'/../vendor/autoload.php';  $app = new silex\application();  $app->get(     '/the-only-functional',     function() use ($app) {         return new \symfony\component\httpfoundation\response(             $app['request']->get('q')         );     } );  $app->get(     '/{whatever}',     function($whatever) use ($app) {         $subrequest = \symfony\component\httpfoundation\request::create(             '/the-only-functional',             'get',             ['q'=>$whatever]         );         $response = $app->handle($subrequest);          if (200 != $response->getstatuscode()) {             throw new \exception(                 "aha, that's problem lies"                 . $response->getstatuscode() . ":"                 . $response->getcontent()             );         }          return $response;     } )->value('whatever', 'nothing');  $app->run(); 

with http server running as:

php -s localhost:8081 -d "date.timezone=utc" -t web  web/index.php 

you can try different permutations:

curl -v http://localhost:8081/ curl -v http://localhost:8081/blah-blah curl -v http://localhost:8081/the-only-functional?q=direct curl -v http://localhost:8081/?q=this+example+does+not+forward+query+string 

and always 200 response.

unfortunately, without sharing code, on own debugging app. sensible advice analyse sub-response before returning it, , may log backtrace localise problem.