[
https://issues.apache.org/jira/browse/NIFI-15953?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Handermann updated NIFI-15953:
------------------------------------
Status: Patch Available (was: In Progress)
> Improve Proxy Host Header Documentation and Validation
> ------------------------------------------------------
>
> Key: NIFI-15953
> URL: https://issues.apache.org/jira/browse/NIFI-15953
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The framework supports several optional HTTP headers that allow a reverse
> proxy or load balancer to pass alternative values for use in rendering links
> and location headers. Jetty 12 introduced additional default constraints on
> the {{Host}} header in relation to TLS Server Name Indication and DNS Subject
> Alternative Names, but those constraints do not apply to proxy headers. The
> framework also provides the {{nifi.web.proxy.host}} property to configure
> allowed proxy host and port values, and the documentation for this property
> should be expanded to describe the expectations on a reverse proxy server for
> filtering input requests and setting allowed values.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
