-
Notifications
You must be signed in to change notification settings - Fork 4.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Unconditionally remove proxy headers to prevent httpoxy #15146
Conversation
@@ -171,7 +171,10 @@ frontend public | |||
{{- if (eq .StatsPort -1) }} | |||
monitor-uri /_______internal_router_healthz | |||
{{- end }} | |||
|
|||
|
|||
# Strip off Proxy headers to prevent HTTTpoxy (https://httpoxy.org/) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
HTTTpoxy -> HTTPoxy
@openshift/networking |
See https://httpoxy.org/ for more details. Signed-off-by: Simo Sorce <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
[test] |
Evaluated for origin test up to c75a93b |
continuous-integration/openshift-jenkins/test SUCCESS (https://ci.openshift.redhat.com/jenkins/job/test_pull_request_origin/3143/) (Base Commit: 6ba4bf5) (PR Branch Commit: c75a93b) |
Ok, let's [merge] this now and we can decide if we need to add control of removing arbitrary headers in the future. |
continuous-integration/openshift-jenkins/merge SUCCESS (https://ci.openshift.redhat.com/jenkins/job/test_pull_request_origin/3143/) (Base Commit: 6ba4bf5) (PR Branch Commit: c75a93b) (Image: devenv-rhel7_6443) |
Evaluated for origin merge up to c75a93b |
See https://httpoxy.org/ for more details.
Fixes #14516