diff --git a/internal/server/handlerMain.go b/internal/server/handlerMain.go index 48d49d6..94687ae 100644 --- a/internal/server/handlerMain.go +++ b/internal/server/handlerMain.go @@ -37,6 +37,17 @@ var prohibitedRequestHeaders = []string{ authorizationHeader, "User-Agent", "Host", + // HTTP hop-by-hop headers that should not be forwarded to downstream services + "Accept-Encoding", + "Content-Encoding", + "Transfer-Encoding", + "Connection", + "Keep-Alive", + "Upgrade", + "TE", + "Trailer", + "Proxy-Authorization", + "Proxy-Authenticate", } type ExtractedRequestData struct {