You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The underlying proxy library (elazarl/goproxy) and internal functions use the golang representation of HTTP requests/responses. These have limitations, and in particular header order (and likely capitilisation) is not maintained.
This may cause some issues where vulnerabilities cannot be tested for, or it may create confusion.
If practical, fixes should be provided upstream to the elazarl/goproxy library, or a fork should be maintained.
The text was updated successfully, but these errors were encountered:
We currently have work underway on a new library for proxying which doesn't rely on Golang's HTTP implementation. A technical proof of concept is in progress, but we don't necessarily have any timeframes.
The underlying proxy library (elazarl/goproxy) and internal functions use the golang representation of HTTP requests/responses. These have limitations, and in particular header order (and likely capitilisation) is not maintained.
This may cause some issues where vulnerabilities cannot be tested for, or it may create confusion.
If practical, fixes should be provided upstream to the elazarl/goproxy library, or a fork should be maintained.
The text was updated successfully, but these errors were encountered: