Version 6 pre-stable
This version of Silverstripe CMS has not yet been given a stable release. See the release roadmap for more information. Go to documentation for the most recent stable version.

Built-in middleware

Silverstripe CMS has a number of Middleware components. Some of them are listed here. Many of them are in the SilverStripe\Control\Middleware namespace.

NameDescription
AllowedHostsMiddlewareSecures requests by only allowing a whitelist of Host values
AuthenticationMiddlewareHandles authentication for the request
CanonicalURLMiddlewareURL normalisation and redirection
ChangeDetectionMiddlewareChange detection via Etag / IfModifiedSince headers, conditionally sending a 304 not modified if possible.
ConfirmationMiddlewareChecks whether user manual confirmation is required for HTTPRequest
DevelopmentAdminConfirmationMiddlewareA specific subclass of ConfirmationMiddleware which handles the /dev/* routes.
ExecMetricMiddlewareDisplay execution metrics in DEV mode
HTTPCacheControlMiddlewareControls HTTP response cache headers
PasswordExpirationMiddlewareCheck if authenticated user has password expired
RateLimitMiddlewareAccess throttling, controls HTTP Retry-After header
SessionMiddlewarePHP Session initialisation
TrustedProxyMiddlewareRewrites headers that provide IP and host details from upstream proxies
URLSpecialsMiddlewareControls some of the URL special variables