Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: enhance security against header spoofing #12213

Open
wants to merge 6 commits into
base: main
Choose a base branch
from

Commits on Oct 13, 2024

  1. refactor(astro/core/app/node): move function declaration out of paren…

    …t and improve documentation
    
    * Moved inner function `functionName` outside its parent function for better code organization and readability.
    * Improved JSDoc annotations for `functionName`, detailing parameters, return type, and usage.
    Jahir Vidrio committed Oct 13, 2024
    Configuration menu
    Copy the full SHA
    209fc08 View commit details
    Browse the repository at this point in the history
  2. docs(astro/core/app/node): convert single-line comments to JSDoc for …

    …better highlighting
    
    * Changed `//` comments to `/** */` for comments that include `@example` annotations.
    * Ensured proper JSDoc format so that code editors correctly highlight the examples.
    Jahir Vidrio committed Oct 13, 2024
    Configuration menu
    Copy the full SHA
    4258feb View commit details
    Browse the repository at this point in the history
  3. feat(astro/core/app/node): add trustDownstreamProxy option to enhance…

    … security against header spoofing
    
    * Introduced a new `trustDownstreamProxy` option in the `options` object to control whether `X-Forwarded-XXXX` headers should be considered.
    * This boolean option defaults to `true` to maintain backward compatibility while enhancing security.
    * When set to `false`, the `X-Forwarded` headers are ignored, reducing the risk of header spoofing.
    Jahir Vidrio committed Oct 13, 2024
    Configuration menu
    Copy the full SHA
    26ed48f View commit details
    Browse the repository at this point in the history
  4. chore: changeset

    Jahir Vidrio committed Oct 13, 2024
    Configuration menu
    Copy the full SHA
    b92a89a View commit details
    Browse the repository at this point in the history

Commits on Oct 14, 2024

  1. Configuration menu
    Copy the full SHA
    1122fd2 View commit details
    Browse the repository at this point in the history

Commits on Oct 15, 2024

  1. Configuration menu
    Copy the full SHA
    e1c664d View commit details
    Browse the repository at this point in the history