Spring/spring-framework
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Polishing

Browse Source 
Closes gh-31491
This commit is contained in:
rstoyanchev
2023-10-25 13:20:57 +01:00
parent 03d286c4a1
commit 93528b60d7
3 changed files with 35 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
framework-docs/modules/ROOT/pages/web/webflux/reactive-spring.adoc
View File

@@ -372,7 +372,7 @@ include::partial$web/forwarded-headers.adoc[]
[[webflux-forwarded-headers-forwardedheadertransformer]]
[[webflux-forwarded-headers-transformer]]
=== ForwardedHeaderTransformer
`ForwardedHeaderTransformer` is a component that modifies the host, port, and scheme of
@@ -390,7 +390,7 @@ filters, and `ForwardedHeaderTransformer` is used instead.
[[webflux-forwarded-headers-security]]
=== Security Considerations
There are security considerations for forwarded headers, since an application cannot know
There are security considerations for forwarded headers since an application cannot know
if the headers were added by a proxy, as intended, or by a malicious client. This is why
a proxy at the boundary of trust should be configured to remove untrusted forwarded traffic coming
from the outside. You can also configure the `ForwardedHeaderTransformer` with

2
framework-docs/modules/ROOT/pages/web/webmvc/filters.adoc
View File

@@ -57,7 +57,7 @@ with `removeOnly=true`, in which case it removes but does not use the headers.
[[filters-forwarded-headers-dispatcher]]
=== About Dispatcher Types
=== Dispatcher Types
In order to support xref:web/webmvc/mvc-ann-async.adoc[asynchronous requests] and error dispatches this
filter should be mapped with `DispatcherType.ASYNC` and also `DispatcherType.ERROR`.