▲ 15 ▼ Hardening Traefik Against Header Alias Spoofing with underscoreHeadersStrategy and aliasHeadersStrategy (blog.lrvt.de) submitted 2 hours ago by sanitation@lemmy.today to c/selfhosted@lemmy.world 1 comment fedilink hide all child comments Traefik v3.7.12 deprecates the previously introduced underscoreHeadersStrategy entrypoint option and introduces a new one called aliasHeadersStrategy that rejects even more potentially spoofed headers - not just with underscores. Reminder to adjust your Traefik config. Add an entry point option to handle request headers with aliasing names by rtribotte · Pull Request #13720 · traefik/traefik
[–] greyscale@lemmy.grey.ooo 5 points 1 hour ago urg its hypocritical of me to say so but I groaned when I saw the branch name starts with claude/xxx permalink fedilink source
1 comment