Salesforce has migrated its content delivery infrastructure to Cloudflare's CDN (Content Delivery Network). As part of this migration, HTTP/2 protocol enforcement has been applied to all Salesforce API traffic. HTTP/2 requires that all HTTP header names be transmitted in lowercase.
Previously, HTTP headers in Salesforce API responses retained their original mixed-case formatting (for example, Content-Type, X-Salesforce-Request-Id). After the Cloudflare CDN migration, all HTTP header names are normalized to lowercase (for example, content-type, x-salesforce-request-id).
Apex code, integration middleware, or custom applications that retrieve HTTP response headers by their original mixed-case names will fail to find the header after this change, because the header name lookup is case-sensitive in many HTTP client libraries.
This change affects:
HttpResponse.getHeader('Content-Type') or similar mixed-case header name patterns.To ensure your Apex code works correctly after the Cloudflare CDN migration, update all HttpResponse.getHeader() calls to use lowercase header names.
Before the migration, a typical Apex header retrieval looked like: String contentType = res.getHeader('Content-Type');
After the migration, update this to: String contentType = res.getHeader('content-type');
To write code that works correctly both before and after the migration (for example, if you are deploying to orgs that may or may not yet be migrated), implement a fallback pattern:
res.getHeader('content-type').res.getHeader('Content-Type').This pattern ensures backward compatibility during the migration window.
If you use an external tool or integration that reads Salesforce API response headers, review its HTTP client configuration and update any header name references to use lowercase values.
005318663

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.