From ecab6764946ad4b2f267a1a531af1df7ca23cbe1 Mon Sep 17 00:00:00 2001 From: Philipp Thun Date: Fri, 16 Oct 2026 10:27:22 +0200 Subject: [PATCH] Hide X-RateLimit-Reason header The ratelimit reason is internal and thus not be forwarded to clients. --- jobs/cloud_controller_ng/templates/nginx.conf.erb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/jobs/cloud_controller_ng/templates/nginx.conf.erb b/jobs/cloud_controller_ng/templates/nginx.conf.erb index d17c6d570e..80185d0fbc 100644 --- a/jobs/cloud_controller_ng/templates/nginx.conf.erb +++ b/jobs/cloud_controller_ng/templates/nginx.conf.erb @@ -19,7 +19,8 @@ http { access_log /var/vcap/sys/log/cloud_controller_ng/nginx-access.log main; - proxy_hide_header X-USER-GUID; #user guid header should not be forwarded to client + proxy_hide_header X-USER-GUID; #user guid header should not be forwarded to client + proxy_hide_header X-RATELIMIT-REASON; #the ratelimit reason is internal and thus not be forwarded to client sendfile on; #enable use of sendfile() sendfile_max_chunk 1M; #make sure not to block on fast clients reading large files