HTTP Status Codes

305 Use Proxy

A deprecated status that instructed the client to repeat the request through a given proxy. Removed from active use for security reasons.

What it means

305 Use Proxy originally told a client to resend the request via the proxy named in the response. Because it let a server redirect a client onto an attacker-controlled proxy, it was deprecated and most clients never honoured it.

Do not use

305 is deprecated. Configure proxies through client or network settings, never via a server response.

Why it matters

  • It is a cautionary case of a redirect mechanism that created a security risk and was withdrawn.

Common mistakes

  • Attempting to use 305 to steer clients through a proxy — clients ignore it and it is unsafe.

How WebInspect checks this

  • WebInspect reports the raw status if ever seen and flags deprecated codes.