Merge pull request #1398 from aledbf/nginx-httpoxy

Mitigate HTTPoxy Vulnerability
kubernetes-retired · Jul 20, 2016 · a7d5ed2 · a7d5ed2
2 parents 9979a9a + 48753b3
commit a7d5ed2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ingress/controllers/nginx/nginx.tmpl b/ingress/controllers/nginx/nginx.tmpl
@@ -252,6 +252,10 @@ http {
             proxy_set_header X-Forwarded-Port       $server_port;
             proxy_set_header X-Forwarded-Proto      $pass_access_scheme;
 
+            # mitigate HTTPoxy Vulnerability
+            # https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/
+            proxy_set_header Proxy                  "";
+
             proxy_connect_timeout                   {{ $cfg.proxyConnectTimeout }}s;
             proxy_send_timeout                      {{ $cfg.proxySendTimeout }}s;
             proxy_read_timeout                      {{ $cfg.proxyReadTimeout }}s;