Http proxy / don't copy X-Forwarded headers to the proxied request

geonetwork · Oct 10, 2023 · d9f09b6 · d9f09b6
1 parent d73e099
commit d9f09b6
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/web/src/main/java/org/fao/geonet/proxy/URITemplateProxyServlet.java b/web/src/main/java/org/fao/geonet/proxy/URITemplateProxyServlet.java
@@ -89,7 +89,10 @@ public class URITemplateProxyServlet extends org.mitre.dsmiley.httpproxy.URITemp
             "Vary",
             "Access-Control-Allow-Credentials",
             "Strict-Transport-Security",
-            "Etag"};
+            "Etag",
+            "X-Forwarded-Host",
+            "X-Forwarded-Proto",
+            "X-Forwarded-Prefix"};
         for (String header : headers) {
             hopByHopHeaders.addHeader(new BasicHeader(header, null));
         }