From 34eb5acee75cf2dad410f899da48779a0aa0cb40 Mon Sep 17 00:00:00 2001 From: bergquist Date: Fri, 29 Jan 2016 23:14:21 +0100 Subject: [PATCH] feat(dataproxy): remove 'SetCookie' from reponse set cookie could potentialll leak information about the datasource if in proxy mode. closes #3845 --- pkg/api/dataproxy.go | 1 + 1 file changed, 1 insertion(+) diff --git a/pkg/api/dataproxy.go b/pkg/api/dataproxy.go index 77742a7a9f3..4d4556c40cb 100644 --- a/pkg/api/dataproxy.go +++ b/pkg/api/dataproxy.go @@ -103,5 +103,6 @@ func ProxyDataSourceRequest(c *middleware.Context) { proxy := NewReverseProxy(ds, proxyPath, targetUrl) proxy.Transport = dataProxyTransport proxy.ServeHTTP(c.Resp, c.Req.Request) + c.Resp.Header().Del("Set-Cookie") } }