mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
8 lines
397 B
Django/Jinja
8 lines
397 B
Django/Jinja
# Strip client-supplied identity headers on non-SSO-gated locations so they cannot be forged.
|
|
proxy_set_header X-Forwarded-User "";
|
|
proxy_set_header X-Forwarded-Preferred-Username "";
|
|
proxy_set_header X-Forwarded-Email "";
|
|
proxy_set_header X-Forwarded-Groups "";
|
|
proxy_set_header X-Forwarded-Access-Token "";
|
|
{% include 'roles/sys-svc-proxy/templates/headers/untrusted_identity_strips.conf.j2' %}
|