Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unconditionally remove proxy headers to prevent httpoxy #15146

Merged
merged 1 commit into from
Jul 14, 2017

Conversation

simo5
Copy link
Contributor

@simo5 simo5 commented Jul 11, 2017

See https://httpoxy.org/ for more details.
Fixes #14516

@@ -171,7 +171,10 @@ frontend public
{{- if (eq .StatsPort -1) }}
monitor-uri /_______internal_router_healthz
{{- end }}


# Strip off Proxy headers to prevent HTTTpoxy (https://httpoxy.org/)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

HTTTpoxy -> HTTPoxy

@enj
Copy link
Contributor

enj commented Jul 11, 2017

@openshift/networking

Copy link
Contributor

@pecameron pecameron left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@simo5
Copy link
Contributor Author

simo5 commented Jul 14, 2017

[test]

@openshift-bot
Copy link
Contributor

Evaluated for origin test up to c75a93b

@openshift-bot
Copy link
Contributor

continuous-integration/openshift-jenkins/test SUCCESS (https://ci.openshift.redhat.com/jenkins/job/test_pull_request_origin/3143/) (Base Commit: 6ba4bf5) (PR Branch Commit: c75a93b)

@knobunc
Copy link
Contributor

knobunc commented Jul 14, 2017

Ok, let's [merge] this now and we can decide if we need to add control of removing arbitrary headers in the future.

@openshift-bot
Copy link
Contributor

openshift-bot commented Jul 14, 2017

continuous-integration/openshift-jenkins/merge SUCCESS (https://ci.openshift.redhat.com/jenkins/job/test_pull_request_origin/3143/) (Base Commit: 6ba4bf5) (PR Branch Commit: c75a93b) (Image: devenv-rhel7_6443)

@openshift-bot
Copy link
Contributor

Evaluated for origin merge up to c75a93b

@openshift-bot openshift-bot merged commit 245158d into openshift:master Jul 14, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants