To ensure business security and stability, after February 28, 2025, the Volcengine Object Storage product will no longer allow custom response headers in anonymous Get requests.

Estimated change time

February 28, 2025; please refer to the console's launch time for the exact schedule.

Change description

TOS supports customizing response header fields in GET requests.

To override the GetObject response header fields Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Type, and Expires, you can use the following query parameters in your request:

response-cache-control

response-content-disposition

response-content-encoding

response-content-language

response-content-type

response-expires

warning

These modified response header fields are included only in successful responses, specifically when the HTTP status code 200 OK is returned.

After the change, you must sign the request when using these parameters. These parameters cannot be used for unsigned (anonymous) requests. If you customize the response headers in a GET request made via anonymous access, a 400 error code will be returned and the response headers will not be modified.

Last updated: 2025.10.10 11:19:07

Public security network record in Beijing: No. 11010802032137