From: Grant Slater Date: Fri, 22 Nov 2019 15:00:13 +0000 (+0000) Subject: tilecache: remove additional cache poisoning header X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/6e589eb98e98b16600b9f7782e81273b349ede57 tilecache: remove additional cache poisoning header --- diff --git a/cookbooks/tilecache/templates/default/nginx_tile.conf.erb b/cookbooks/tilecache/templates/default/nginx_tile.conf.erb index f53cb4ec4..47d3bd372 100644 --- a/cookbooks/tilecache/templates/default/nginx_tile.conf.erb +++ b/cookbooks/tilecache/templates/default/nginx_tile.conf.erb @@ -194,10 +194,11 @@ server { proxy_set_header Accept-Charset ''; # Do not send origin, we allow all. proxy_set_header origin ''; - # Do not pass invalid header to backend. + # Do not pass invalid headers to backend. proxy_set_header X-Forwarded-Host ''; proxy_set_header X-Host ''; proxy_set_header Authorization ''; + proxy_set_header Proxy-Authorization ''; # Drop partial requests proxy_set_header range '';