psp-5235 prevent nginx proxy from passing through IIS set-cookie head…

…er. (#2728)
bcgov · Jan 27, 2023 · 100c92b · 100c92b
1 parent f12cba2
commit 100c92b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/openshift/s2i/nginx-runtime/nginx.conf.template b/openshift/s2i/nginx-runtime/nginx.conf.template
@@ -59,6 +59,8 @@ http {
         location /ogs-internal {
             proxy_ssl_server_name on;
             proxy_ssl_session_reuse on;
+            proxy_hide_header Set-Cookie;
+            proxy_ignore_headers Set-Cookie;
             proxy_pass          %GEOSERVER_URL%;
         }