Allow Authorization header pass-through with X-Cors-Proxy-Allowed-Request-Headers#2007

Merged

brandonpayton merged 11 commits intoWordPress:trunkfrom Automattic:allow-authorization-header

Dec 12, 2024

+155-21

Commits on Dec 11, 2024

Remove Authorization header from list of headers stripped from proxy requests
maxschmeling
committed
Implement X-Cors-Proxy-Allowed-Request-Headers based header filtering
maxschmeling
committed
Define default_allowed_headers and strictly_disallowed_headers together
maxschmeling
committed
Add note about X-Cors-Proxy-Allowed-Request-Headers to README
maxschmeling
committed
Convert to curl header format after filtering
maxschmeling
committed
Switch to headers_requiring_opt_in approach
maxschmeling
committed
Some opinionated syntax/style adjustments
brandonpayton
committed
Rename header filtering function since it filters based on name now
brandonpayton
committed
Add more docs and make more minor tweaks
brandonpayton
committed
Strip WWW-Authenticate headers from response headers
brandonpayton
committed

Commits on Dec 12, 2024

Very minor style fix for tests
brandonpayton
committed