From: Vsevolod Stakhov <vsevolod@highsecure.ru>
Date: Sun, 31 Dec 2017 16:01:47 +0000 (+0000)
Subject: [Fix] Remove hop-by-hop headers in proxy
X-Git-Tag: 1.6.6~3^2~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e8459e78e4a71626bd3b171fb04768ad9ee461e8;p=thirdparty%2Frspamd.git

[Fix] Remove hop-by-hop headers in proxy

Issue: #1973
---

diff --git a/src/rspamd_proxy.c b/src/rspamd_proxy.c
index 7fe6245340..59bc8b8932 100644
--- a/src/rspamd_proxy.c
+++ b/src/rspamd_proxy.c
@@ -1872,6 +1872,9 @@ proxy_client_finish_handler (struct rspamd_http_connection *conn,
 				session->client_conn);
 		session->shmem_ref = rspamd_http_message_shmem_ref (session->client_message);
 		rspamd_http_message_remove_header (msg, "Content-Length");
+		rspamd_http_message_remove_header (msg, "Transfer-Encoding");
+		rspamd_http_message_remove_header (msg, "Keep-Alive");
+		rspamd_http_message_remove_header (msg, "Connection");
 		rspamd_http_message_remove_header (msg, "Key");
 
 		proxy_open_mirror_connections (session);
@@ -1891,6 +1894,9 @@ err:
 	rspamd_http_connection_steal_msg (session->client_conn);
 	rspamd_http_message_remove_header (msg, "Content-Length");
 	rspamd_http_message_remove_header (msg, "Key");
+	rspamd_http_message_remove_header (msg, "Transfer-Encoding");
+	rspamd_http_message_remove_header (msg, "Keep-Alive");
+	rspamd_http_message_remove_header (msg, "Connection");
 	rspamd_http_connection_reset (session->client_conn);
 	proxy_client_write_error (session, 404, "Backend not found");