Skip to content

Commit

Permalink
Remove kbn-version header from requests to Kibana. (#14482) (#14493)
Browse files Browse the repository at this point in the history
Non-browser clients are expected to use only kbn-xsrf for CSRF protection, and not kbn-version.
kbn-version is problematic when Kibana is upgraded, since the version is only pinned at startup when libbeat establishes the connection.

See elastic/kibana@621bf0e

Fixes #14481
  • Loading branch information
jalvz authored Nov 19, 2019
1 parent 5724f3a commit 4db6283
Showing 1 changed file with 0 additions and 3 deletions.
3 changes: 0 additions & 3 deletions libbeat/kibana/client.go
Original file line number Diff line number Diff line change
Expand Up @@ -194,9 +194,6 @@ func (conn *Connection) Send(method, extraPath string,
req.Header.Set("Content-Type", "application/json")
req.Header.Add("Accept", "application/json")
req.Header.Set("kbn-xsrf", "1")
if method != "GET" {
req.Header.Set("kbn-version", conn.Version.String())
}

for header, values := range headers {
for _, value := range values {
Expand Down

0 comments on commit 4db6283

Please sign in to comment.