HTTP security

• Terraform aws lb: drop_invalid_header_fields
• ignore_invalid_headers in Nginx
• aws_s3_bucket_cors_configuration: allowed_headers

Related

• HTTP request methods
• HTTPS
• CORS
• OIDC

See also

• HTTP security, CORS, OIDC
• HTTP, HTTP client, HTTP/1.1, HTTP/2, HTTP/3, HTTPS, HSTS CSR, TLS, SSL, openSSL, WebSockets, WebRTC, ssl_certificate QUIC, HPKP, CT, List of HTTP status codes, URL redirection, Content-type:, Webhook, HTTP headers, --insecure, Axios HTTP client, HTTP cookies, HTTP ETag, Hypertext Transfer Protocol -- HTTP/1.1, HTTP security, host verification, HTTP request methods