Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[2.0] Drop the trust_x_forwarded_proto option #594

Closed
Jean85 opened this issue May 4, 2018 · 0 comments
Closed

[2.0] Drop the trust_x_forwarded_proto option #594

Jean85 opened this issue May 4, 2018 · 0 comments
Milestone

Comments

@Jean85
Copy link
Collaborator

Jean85 commented May 4, 2018

As pointed out in #592 (comment), we should not trust the X_FORWARDED_* headers for security reasons, and drop the option altogether; the header is stored inside the events anyway, if they are to be inspected.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants