New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

[Snyk] ALB does not drop invalid headers #78

Open

2 tasks

nickumia-reisys opened this issue Feb 6, 2023 · 0 comments

Contributor

nickumia-reisys commented Feb 6, 2023

Date of report: 12/06/2022
Severity: Low

ALB does not drop invalid headers (Low)
- Detailed paths
  - Path: terraform/ecs/provision/lb-follower.tf
  - Introduced through: resource › aws_lb[solr-follower]
- This issue is...
  - The application load balancer is not set to drop invalid headers.
- The impact of this is...
  - Maliciously crafted headers may be accepted by the load balancer
- You can resolve it by...
  - Set drop_invalid_header_fields to true
ALB does not drop invalid headers (Low)
- Detailed paths
  - Path: terraform/ecs/provision/lb-leader.tf
  - Introduced through: resource › aws_lb[solr]
- This issue is...
  - The application load balancer is not set to drop invalid headers.
- The impact of this is...
  - Maliciously crafted headers may be accepted by the load balancer
- You can resolve it by...
  - Set drop_invalid_header_fields to true

The text was updated successfully, but these errors were encountered:

nickumia-reisys mentioned this issue

[datagov-brokerpak-solr] ALB does not drop invalid headers GSA/data.gov#4103

Closed

2 tasks

# for free to join this conversation on GitHub. Already have an account? # to comment