include referer header in remote requests

this is an optional feature which is disabled by default, since it is
only needed in a few select cases and risks accidentally exposing
internal URLs.

Fixes #216
This commit is contained in:
Will Norris 2020-02-21 08:24:23 +00:00
parent edd9dbac2d
commit 8c28dca762
3 changed files with 12 additions and 0 deletions

View file

@ -46,6 +46,7 @@ var addr = flag.String("addr", "localhost:8080", "TCP address to listen on")
var allowHosts = flag.String("allowHosts", "", "comma separated list of allowed remote hosts")
var denyHosts = flag.String("denyHosts", "", "comma separated list of denied remote hosts")
var referrers = flag.String("referrers", "", "comma separated list of allowed referring hosts")
var includeReferer = flag.Bool("includeReferer", false, "include referer header in remote requests")
var baseURL = flag.String("baseURL", "", "default base URL for relative remote URLs")
var cache tieredCache
var signatureKeys signatureKeyList
@ -87,6 +88,7 @@ func main() {
}
}
p.IncludeReferer = *includeReferer
p.Timeout = *timeout
p.ScaleUp = *scaleUp
p.Verbose = *verbose