[
https://issues.apache.org/jira/browse/NIFI-15953?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18082565#comment-18082565
]
ASF subversion and git services commented on NIFI-15953:
--------------------------------------------------------
Commit 41625c4433898922b0a3e7635f597cb4ef197c28 in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=41625c44338 ]
NIFI-15953 Improved Proxy Host Header Documentation and Validation (#11268)
> Improve Proxy Host Header Documentation and Validation
> ------------------------------------------------------
>
> Key: NIFI-15953
> URL: https://issues.apache.org/jira/browse/NIFI-15953
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The framework supports several optional HTTP headers that allow a reverse
> proxy or load balancer to pass alternative values for use in rendering links
> and location headers. Jetty 12 introduced additional default constraints on
> the {{Host}} header in relation to TLS Server Name Indication and DNS Subject
> Alternative Names, but those constraints do not apply to proxy headers. The
> framework also provides the {{nifi.web.proxy.host}} property to configure
> allowed proxy host and port values, and the documentation for this property
> should be expanded to describe the expectations on a reverse proxy server for
> filtering input requests and setting allowed values.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
