Update default.conf to include X-Forwarded-Host overwrite as default

caprover / nginx-reverse-proxy

A very simple reverse proxy using nginx and Docker

19 stars 41 forks source link

Update default.conf to include X-Forwarded-Host overwrite as default #9

Closed Maksym-0xp closed 5 months ago

Maksym-0xp commented 5 months ago

This prevents X-Forwarded forgery if upstream services trust the headers set by nginx, and downstream clients can set falsified forward headers. I see this as being a good default for a reverse proxy.

githubsaturn commented 5 months ago

Thanks!