[Snyk] ALB does not drop invalid headers - Githubissues

GSA-TTS / datagov-brokerpak-solr

An OSBAPI brokerpak that supplies services needed by the datagov team

Other

8 stars 5 forks source link

[Snyk] ALB does not drop invalid headers #78

Open nickumia-reisys opened 1 year ago

nickumia-reisys commented 1 year ago

Date of report: 12/06/2022 Severity: Low

[ ] ALB does not drop invalid headers (Low)
- Detailed paths
- Path: terraform/ecs/provision/lb-follower.tf
- Introduced through: resource › aws_lb[solr-follower]
- This issue is...
- The application load balancer is not set to drop invalid headers.
- The impact of this is...
- Maliciously crafted headers may be accepted by the load balancer
- You can resolve it by...
- Set drop_invalid_header_fields to true
[ ] ALB does not drop invalid headers (Low)
- Detailed paths
- Path: terraform/ecs/provision/lb-leader.tf
- Introduced through: resource › aws_lb[solr]
- This issue is...
- The application load balancer is not set to drop invalid headers.
- The impact of this is...
- Maliciously crafted headers may be accepted by the load balancer
- You can resolve it by...
- Set drop_invalid_header_fields to true