David Handermann created NIFI-15953:
---------------------------------------
Summary: Improve Proxy Host Header Documentation and Validation
Key: NIFI-15953
URL: https://issues.apache.org/jira/browse/NIFI-15953
Project: Apache NiFi
Issue Type: Improvement
Components: Core Framework
Reporter: David Handermann
Assignee: David Handermann
The framework supports several optional HTTP headers that allow a reverse proxy
or load balancer to pass alternative values for use in rendering links and
location headers. Jetty 12 introduced additional default constraints on the
{{Host}} header in relation to TLS Server Name Indication and DNS Subject
Alternative Names, but those constraints do not apply to proxy headers. The
framework also provides the {{nifi.web.proxy.host}} property to configure
allowed proxy host and port values, and the documentation for this property
should be expanded to describe the expectations on a reverse proxy server for
filtering input requests and setting allowed values.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
