Re: [Pound Mailing List] httpoxy mitigation

sec wise <[email protected]> Mon, 25 Jul 2016 17:02:53 +0200

Newsgroups	gmane.comp.web.pound.general
Message-ID	<[email protected]>


Hi Jan, &gt; Thought you might like this: (httpoxy mitigation) &gt; https://secwise.nl/mitigating-httpoxy-using-pound/ HeadRemove receives a RegExp as an argument and matches not only the header name, but also its value, so ... HeadRemove "Proxy" ... will not only remove a "Proxy: bla" header, but also for example a "Host: proxy.somehost.bla" header or any other header including the word "proxy". You might want to use instead: HeadRemove "^Proxy:" Best regards, Jonas


Hi Jonas,



For whatever reason I did not receive your reply. However, thank you for your feedback and teaching me that it is a regex argument.



Regards,



Jan