Skip to content

Drop the Strict-Transport-Security response header #1984

Merged
Tratcher merged 2 commits into
mainfrom
tratcher/sts
Jan 4, 2023
Merged

Drop the Strict-Transport-Security response header #1984
Tratcher merged 2 commits into
mainfrom
tratcher/sts

Conversation

@Tratcher

@Tratcher Tratcher commented Jan 4, 2023

Copy link
Copy Markdown
Member

Fixes #1862

Strict-Transport-Security is a per-hop response header. Since we terminate TLS, we should not proxy this header.

@Tratcher Tratcher added this to the YARP 2.0.0 milestone Jan 4, 2023
@Tratcher Tratcher requested a review from MihaZupan as a code owner January 4, 2023 01:11
@Tratcher Tratcher self-assigned this Jan 4, 2023
@Kahbazi

Kahbazi commented Jan 4, 2023

Copy link
Copy Markdown
Member

Should the doc be updated as well to include this header? https://github.com/microsoft/reverse-proxy/blob/4f46326e6a73ecc1785bc07040491600ba2d312b/docs/docfx/articles/header-guidelines.md#yarp-header-filtering

@MihaZupan MihaZupan left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Tratcher Tratcher enabled auto-merge (squash) January 4, 2023 18:30
@Tratcher Tratcher merged commit f26d0f1 into main Jan 4, 2023
@Tratcher Tratcher deleted the tratcher/sts branch January 4, 2023 18:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Duplicated Strict-Transport-Security response header

3 participants