Fixes #14 - X-Forwarded-For could be messed up

jcmoraisjr · May 10, 2017 · 1a17902 · 1a17902
1 parent cd17319
commit 1a17902
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/rootfs/haproxy.tmpl b/rootfs/haproxy.tmpl
@@ -61,6 +61,7 @@ frontend httpfront
 {{ if ne $cfg.Syslog "" }}
     option httplog
 {{ end }}
+    reqidel ^X-Forwarded-For:.*
     option forwardfor
 {{ range $server := $cfg.HTTPServers }}
 {{ range $location := $server.Locations }}
@@ -132,6 +133,7 @@ frontend httpsfront-{{ $host }}
 {{ if ne $cfg.Syslog "" }}
     option httplog
 {{ end }}
+    reqidel ^X-Forwarded-For:.*
     option forwardfor
     rspadd Strict-Transport-Security:\ max-age=15768000
 {{ range $location := $server.Locations }}
@@ -173,6 +175,7 @@ frontend httpsfront-default-backend
 {{ if ne $cfg.Syslog "" }}
     option httplog
 {{ end }}
+    reqidel ^X-Forwarded-For:.*
     option forwardfor
     rspadd Strict-Transport-Security:\ max-age=15768000
     default_backend {{ $location.Backend }}