undocumented allow-all for forwarder-headers

pajod · Apr 25, 2024 · f436614 · f436614
1 parent debe5bb
commit f436614
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/gunicorn/http/message.py b/gunicorn/http/message.py
@@ -142,7 +142,7 @@ def parse_headers(self, data, from_trailer=False):
             # HTTP_X_FORWARDED_FOR = 2001:db8::ha:cc:ed,127.0.0.1,::1
             # Only modify after fixing *ALL* header transformations; network to wsgi env
             if "_" in name:
-                if name in forwarder_headers:
+                if name in forwarder_headers or "*" in forwarder_headers:
                     # This forwarder may override our environment
                     pass
                 elif self.cfg.header_map == "dangerous":