fix(proxy): prevent from passing auth tokens to proxy destination

This commit is contained in:
Karol Sójko 2023-02-22 13:14:09 +01:00
parent dfe30d7f5e
commit 91c70a51a0
No known key found for this signature in database
GPG key ID: D966F68E8A92F649

View file

@ -34,6 +34,10 @@ http
return
}
delete req.headers.authorization
delete req.headers['x-auth-token']
delete req.headers['x-auth-offline-token']
const target = (req.url as string).slice(1)
req.url = target
proxy.web(req, res, {