mirror of
https://github.com/spring-projects/spring-boot.git
synced 2026-09-30 06:09:14 +00:00
This commit highlights that while "forwarded headers" support is enabled automatically for cloud platforms, we generally assume that apps are behind trusted HTTP proxies. If this is not the case, app developers should disable this feature if they choose to expose the application to direct Internet traffic. Closes gh-49507