Hi Jan,

> Thought you might like this: (httpoxy mitigation)
> https://secwise.nl/mitigating-httpoxy-using-pound/

HeadRemove receives a RegExp as an argument and matches not only the
header name, but also its value, so ...

  HeadRemove "Proxy"

... will not only remove a "Proxy: bla" header, but also for example a
"Host: proxy.somehost.bla" header or any other header including the word
"proxy". You might want to use instead:

  HeadRemove "^Proxy:"

Best regards,
Jonas


--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.

Reply via email to