breaking change: do not trust x-forwarded-* headers by default

2018-11-13 10:31:52 +04:00 · 2018-11-13 10:31:52 +04:00 · 5f3b48e16d
commit 5f3b48e16d
parent 023261142c
3 changed files with 3 additions and 2 deletions
--- a/internal/ingress/controller/config/config.go
+++ b/internal/ingress/controller/config/config.go
@ -588,7 +588,7 @@ func NewDefault() Configuration {
 		EnableDynamicTLSRecords:    true,
 		EnableUnderscoresInHeaders: false,
 		ErrorLogLevel:              errorLevel,
-		UseForwardedHeaders:        true,
+		UseForwardedHeaders:        false,
 		ForwardedForHeader:         "X-Forwarded-For",
 		ComputeFullForwardedFor:    false,
 		ProxyAddOriginalURIHeader:  true,