-
Notifications
You must be signed in to change notification settings - Fork 5.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cleanup Connection headers before passing the middleware chain #11077
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
531e7c6
to
26a5be7
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Is this the relevant PR that fixes GHSA-62c8-mh53-4cqv? Or are the additional ones? We want to backport the fix to a version of Traefik, that does not need Go 1.23, as we don't have it in the stable branch of Nixpkgs yet. |
Hello @Scrumplex, Yes, indeed, this is the PR that fixes GHSA-62c8-mh53-4cqv, and there are no additional ones strictly in this regard. |
…ain" to v3.1.2 See traefik@5841441 See traefik#11077 Fixes GHSA-62c8-mh53-4cqv for v3.1.2 Signed-off-by: Sefa Eyeoglu <[email protected]>
What does this PR do?
This pull request cleans the Connection headers before passing the middleware chain. When a connection header needs to pass through the middleware chain, the
forwardedHeaders.connection
option has to be used.More
Additional Notes
Co-authored-by: Romain [email protected]