<?xml version="1.0" encoding="utf-8"?>
<entry xmlns="http://www.w3.org/2005/Atom">
  <author>
    <name>Tony Finch</name>
    <email>dot@dotat.at</email>
    <uri>https://dotat.at/</uri>
  </author>
  <link rel="alternate" href="https://www.lkoskela.fi/blog/2026-11-05-forwarded-without-question/"/>
  <link rel="self" href="https://dotat.at/:/FJRB1.atom"/>
  <id>https://dotat.at/:/FJRB1.html</id>
  <updated>2026-11-08T18:42:02Z</updated>
  <published>2026-11-07T19:55:50Z</published>
  <title type="html">Web frameworks overtrust the HTTP Forwarded: header.</title>
  <content type="html"><![CDATA[
<ul>
  <li>2026‑11‑07 - Web frameworks overtrust the HTTP Forwarded: header.</li>
  <li><a href="https://www.lkoskela.fi/blog/2026-11-05-forwarded-without-question/"><tt>https://www.lkoskela.fi/blog/2026-11-05-forwarded-without-question/</tt></a></li>
  <li>redirect <a href="https://dotat.at/:/FJRB1"><tt>https://dotat.at/:/FJRB1</tt></a></li>
  <li>blurb <a href="https://dotat.at/:/FJRB1.html"><tt>https://dotat.at/:/FJRB1.html</tt></a></li>
  <li>atom entry <a href="https://dotat.at/:/FJRB1.atom"><tt>https://dotat.at/:/FJRB1.atom</tt></a></li>
  <li><a href="https://web.archive.org/web/*/https://www.lkoskela.fi/blog/2026-11-05-forwarded-without-question/"><tt>web.archive.org</tt></a> <a href="https://archive.today/https://www.lkoskela.fi/blog/2026-11-05-forwarded-without-question/"><tt>archive.today</tt></a> </li>
</ul>
]]></content>
</entry>
