Piotr Mlocek e64b0352e8 feat(middleware): broaden HTTP header mutation authority (#3072) ...

* feat(middleware): broaden HTTP header mutation authority

Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com>

* fix(middleware): protect response credential headers from mutation

Response middleware could write or remove Set-Cookie, WWW-Authenticate,
Authentication-Info, and Proxy-Authentication-Info, letting a stage plant
or strip credentials the sandbox client acts on. Protect them in both
directions, matching the request profile's treatment of Authorization and
Cookie, and reserve the x-openshell-credential prefix for responses too.

Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com>

* fix(middleware): reject credential placeholder writes

Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com>

---------

Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com>

2026-09-02 22:57:14 +00:00

..

gateway-interceptors.mdx

fix(security): authenticate extension services (#2638)

2026-08-14 20:34:10 +00:00

supervisor-middleware.mdx

feat(middleware): broaden HTTP header mutation authority (#3072)

2026-09-02 22:57:14 +00:00