undocumented allow-all for forwarder-headers

benoitc · Aug 7, 2024 · 5bbf373 · 5bbf373
1 parent 3e042e8
commit 5bbf373
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/gunicorn/http/message.py b/gunicorn/http/message.py
@@ -146,7 +146,7 @@ def parse_headers(self, data, from_trailer=False):
             # HTTP_X_FORWARDED_FOR = 2001:db8::ha:cc:ed,127.0.0.1,::1
             # Only modify after fixing *ALL* header transformations; network to wsgi env
             if "_" in name:
-                if name in forwarder_headers:
+                if name in forwarder_headers or "*" in forwarder_headers:
                     # This forwarder may override our environment
                     pass
                 elif self.cfg.header_map == "dangerous":