ForwardedHeaderFilter should provide option to "remove" forwarded headers without using them [SPR-15610] #20169
Description
Rossen Stoyanchev opened SPR-15610 and commented
Normally the ForwardedHeaderFilter wraps the request in order incorporate the information contained in "forwarded" type headers (e.g. "X-Forwarded-*", "Forwarded") and also "removes" those headers so they are not visible to code after the filter.
It would be easy enough to add a mode where the filter only "removes" but doesn't use the information from the headers. This could be used as a defensive measure to ensure such headers are always ignored if not expected.
Affects: 4.3.8
Issue Links:
- Improve docs around the use of "Forwarded" and "X-Forwarded-*" headers [SPR-15612] #20171 Improve docs around the use of "Forwarded" and "X-Forwarded-*" headers