RepoMirrors
/
haproxy
mirror of http://git.haproxy.org/git/haproxy.git/
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

DOC: configuration: Remove dangerous directives from the proxy matrix 

For now, that only concerns accept-invalid-http-{request/response} and
accept-unsafe-violations-in-http-{request/response}. But the idea is to make
dangerous directives hard to find. It is one more way to discourage anyone
to use it. And, optionnaly, it is also handy because it keeps the matrix
aligned on 80 columns.
This commit is contained in:
Christopher Faulet 2024-09-16 08:46:16 +02:00
parent 4de6632693
commit 655124f5cc
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
doc/configuration.txt
View File

@ -5350,6 +5350,11 @@ specified in a previous "defaults" section. Keywords supported in defaults
sections marked with "(!)" are only supported in named defaults sections, not sections marked with "(!)" are only supported in named defaults sections, not
anonymous ones. anonymous ones.
Note: Some dangerous and not recommanded directives are intentionnaly not
listed in the following matrix. It is on purpose. These directives are
documentated. But by not listing them below is one more way to discourage
anyone to use it.
keyword defaults frontend listen backend keyword defaults frontend listen backend
------------------------------------+----------+----------+---------+--------- ------------------------------------+----------+----------+---------+---------
@ -5418,10 +5423,6 @@ mode X X X X
monitor fail - X X - monitor fail - X X -
monitor-uri X X X - monitor-uri X X X -
option abortonclose (*) X - X X option abortonclose (*) X - X X
option accept-invalid-http-request (deprecated) (*) X X X -
option accept-invalid-http-response (deprecated) (*) X - X X
option accept-unsafe-violations-in-http-request (*) X X X -
option accept-unsafe-violations-in-http-response (*) X - X X
option allbackups (*) X - X X option allbackups (*) X - X X
option checkcache (*) X - X X option checkcache (*) X - X X
option clitcpka (*) X X X - option clitcpka (*) X X X -