Merge pull request #17959 from dweber019/fix/proxy-backend-secrets

fix: don't expose sensible data in proxy backend
2023-05-25 16:58:41 +02:00
parent 7b9c0fff37 4d428be1e6
commit 7dd8b39a92
2 changed files with 16 additions and 1 deletions
@@ -31,7 +31,17 @@ export interface Config {
          /**
           * Object with extra headers to be added to target requests.
           */
-          headers?: { [key: string]: string };
+          headers?: Partial<{
+            /** @visibility secret */
+            Authorization: string;
+            /** @visibility secret */
+            authorization: string;
+            /** @visibility secret */
+            'X-Api-Key': string;
+            /** @visibility secret */
+            'x-api-key': string;
+            [key: string]: string;
+          }>;
          /**
           * Changes the origin of the host header to the target URL. Default: true.
           */