Merge pull request #3496 from SDA-SE/feat/limit-proxy-response-headers

Filter the response headers in the proxy backend
2020-12-01 10:53:02 +01:00
parent 58db996d17 6a6c7c14ea
commit 01180c65d7
4 changed files with 108 additions and 4 deletions
@@ -0,0 +1,7 @@
+---
+'@backstage/plugin-proxy-backend': patch
+---
+
+Filter the headers that are sent from the proxied-targed back to the frontend to not forwarded unwanted authentication or
+monitoring contexts from other origins (like `Set-Cookie` with e.g. a google analytics context). The implementation reuses
+the `allowedHeaders` configuration that now controls both directions `frontend->target` and `target->frontend`.