Josh Carp created AIRFLOW-3137:
----------------------------------

             Summary: Make ProxyFix middleware optional
                 Key: AIRFLOW-3137
                 URL: https://issues.apache.org/jira/browse/AIRFLOW-3137
             Project: Apache Airflow
          Issue Type: Improvement
            Reporter: Josh Carp
            Assignee: Josh Carp


The werkzeug ProxyFix middleware should only be used when the app is run behind 
a trusted proxy. We should enable ProxyFix via a configuration flag, like in 
superset.

>From the werkzeug docs: "Do not use this middleware in non-proxy setups for 
>security reasons."



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to