[#562] Empty default value for TLS termination header param #575

1 commit

Author SHA1 Message Date
b83e6e1258 [#562] Empty default value for TLS termination header param
All checks were successful
/ DCO (pull_request) Successful in 2m58s
/ Vulncheck (pull_request) Successful in 3m4s
/ Builds (pull_request) Successful in 1m43s
/ Lint (pull_request) Successful in 2m38s
/ Tests (pull_request) Successful in 2m13s
If the service is accessed not through a proxy and the
default value of the parameter with the header key is
not empty, then the system administrator does not
control disabling TLS verification in any way, because
the client can simply add a known header, thereby
skipping the verification. Therefore, the default value
of the header parameter is made empty. If it is empty,
then TLS verification cannot be disabled in any way.
Thus, the system administrator will be able to control
the enabling/disabling of TLS.

Signed-off-by: Roman Loginov <r.loginov@yadro.com>
2024-12-12 10:11:22 +03:00