tilecache: remove additional cache poisoning header
authorGrant Slater <git@firefishy.com>
Fri, 22 Nov 2019 15:00:13 +0000 (15:00 +0000)
committerGrant Slater <git@firefishy.com>
Fri, 22 Nov 2019 15:00:13 +0000 (15:00 +0000)
cookbooks/tilecache/templates/default/nginx_tile.conf.erb

index f53cb4e..47d3bd3 100644 (file)
@@ -194,10 +194,11 @@ server {
       proxy_set_header Accept-Charset '';
       # Do not send origin, we allow all.
       proxy_set_header origin '';
-      # Do not pass invalid header to backend.
+      # Do not pass invalid headers to backend.
       proxy_set_header X-Forwarded-Host '';
       proxy_set_header X-Host '';
       proxy_set_header Authorization '';
+      proxy_set_header Proxy-Authorization '';
 
       # Drop partial requests
       proxy_set_header range '';