Bjørn Erik PedersenandClaude Fable 5.1 6a2a955d25 config/security: Add http.proxyFromEnvironment and document the resolved address check ...

Proxies from HTTP_PROXY/HTTPS_PROXY hide the resolved destination address
from the dial-time validation added in d6e6f9e50, so ignore them unless the
new security.http.proxyFromEnvironment (default false) is enabled. When
enabled, the address check is skipped only for the proxy addresses handed
out by the proxy func; direct dials (e.g. NO_PROXY) are still validated.

Also document that the resolved address validation only applies under the
default security.http.urls allowlist.

Thanks to @Reload3d for reporting these issues.

Closes #15301
Closes #15302

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

2026-09-07 17:36:39 +02:00

..

bundler

Add roles and versions as new dimensions (in addition to language)

2025-11-05 20:39:25 +01:00

create

config/security: Add http.proxyFromEnvironment and document the resolved address check

2026-09-07 17:36:39 +02:00