Skip to content

Add drop_invalid_header_fields load balancer option
Compare
Choose a tag to compare
@joepurnell1 joepurnell1 released this 05 Jan 15:23
· 22 commits to master since this release
3.1.6
4034aa0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

A security audit highlighted a suggestion that load balancers for our apps should block invalid requests to help prevent desync attacks - this adds an optional parameter to turn this setting on.

Assets 2
Loading