undocumented allow-all for forwarder-headers

benoitc · Jul 31, 2024 · 9a69eda · 9a69eda
1 parent 07389be
commit 9a69eda
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/gunicorn/http/message.py b/gunicorn/http/message.py
@@ -142,7 +142,7 @@ def parse_headers(self, data, from_trailer=False):
             # HTTP_X_FORWARDED_FOR = 2001:db8::ha:cc:ed,127.0.0.1,::1
             # Only modify after fixing *ALL* header transformations; network to wsgi env
             if "_" in name:
-                if name in forwarder_headers:
+                if name in forwarder_headers or "*" in forwarder_headers:
                     # This forwarder may override our environment
                     pass
                 elif self.cfg.header_map == "dangerous":