security: drop service headers

2026-04-23 00:38:33 +02:00 · 2025-04-22 15:58:53 +08:00
parent 0a8aa2b215
commit ef483403da
2 changed files with 7 additions and 0 deletions
--- a/internal/net/gphttp/reverseproxy/reverse_proxy_mod.go
+++ b/internal/net/gphttp/reverseproxy/reverse_proxy_mod.go
@@ -380,6 +380,8 @@ func (p *ReverseProxy) handler(rw http.ResponseWriter, req *http.Request) {
 		}()
 	}

+	httpheaders.RemoveServiceHeaders(res.Header)
+
 	// Deal with 101 Switching Protocols responses: (WebSocket, h2c, etc)
 	if res.StatusCode == http.StatusSwitchingProtocols {
 		if !p.modifyResponse(rw, res, req, outreq) {