[ https://issues.apache.org/jira/browse/AIRFLOW-3137?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ash Berlin-Taylor resolved AIRFLOW-3137. ---------------------------------------- Resolution: Fixed Fix Version/s: 2.0.0 > Make ProxyFix middleware optional > --------------------------------- > > Key: AIRFLOW-3137 > URL: https://issues.apache.org/jira/browse/AIRFLOW-3137 > Project: Apache Airflow > Issue Type: Improvement > Reporter: Josh Carp > Assignee: Josh Carp > Priority: Trivial > Fix For: 2.0.0 > > > The werkzeug ProxyFix middleware should only be used when the app is run > behind a trusted proxy. We should enable ProxyFix via a configuration flag, > like in superset. > From the werkzeug docs: "Do not use this middleware in non-proxy setups for > security reasons." -- This message was sent by Atlassian JIRA (v7.6.3#76005)