paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 22 Packages Projects Releases Wiki Activity

Merge pull request #29027 from deepthi-28/doc-proxying

Browse Source 
Proxying doc changed
This commit is contained in:
Fredrik Adelöw
2025-03-11 12:14:31 +01:00
committed by GitHub
parent 5f00ad71f7 b229f0d9de
commit 661a4d62f1
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/plugins/proxying.md
+3 -3
View File
@@ -110,13 +110,13 @@ There are also additional settings:
from the target.
By default, the proxy will only forward safe HTTP request headers to the target.
Those are based on the headers that are considered safe for CORS and includes
These are based on the headers that are considered safe for CORS and include
headers like `content-type` or `last-modified`, as well as all headers that are
set by the proxy. If the proxy should forward other headers like
set by the proxy. If the proxy should forward other headers, like
`authorization`, this must be enabled by the `allowedHeaders` config, for
example `allowedHeaders: ['Authorization']`. This should help to not
accidentally forward confidential headers (`cookie`, `X-Auth-Request-User`) to
third-parties.
third parties.
The same logic applies to headers that are sent from the target back to the
frontend.