Web frameworks overtrust the HTTP Forwarded: header

Hacker News•Sun, Nov 8, 2026, 06:42 PM•2 min read

1 points, 0 comments on Hacker News

Source: [Hacker News](https://www.lkoskela.fi/blog/2026-11-05-forwarded-without-question/)

📰 Read Full Story

This is an aggregated headline summary. For the complete report, visit the original publisher.

Continue Reading at Hacker News ↗

#tech #web #frameworks #overtrust #forwarded #header

More Headlines

TechnologyDev.to• 4m ago

AMR Mechanical and Electrical Engineering — Ch.15: Chapter 15. EMI / EMC Design [KR]

STATERA Library · Series 02 · Volume 02 · Chapter 15 · KR Source: https://github. com/Statera-Library/02_Vol_02_AMR_Mechanical_and_Electrical_Engineering/blob/main/15_EMI_EMC_Design/15_EMI_EMC_Design_KR. md Volume 02.

TechnologyDev.to• 4m ago

AMR Mechanical and Electrical Engineering — Ch.14: Contents {#contents .TOC-Heading} [KR]

STATERA Library · Series 02 · Volume 02 · Chapter 14 · KR Source: https://github. com/Statera-Library/02_Vol_02_AMR_Mechanical_and_Electrical_Engineering/blob/main/14_IP_Rating_and_Outdoor_Protection/14_IP_Rating_and_Outdoor_Protection_KR. md Volume 02.

TechnologyDev.to• 4m ago

AMR Mechanical and Electrical Engineering — Ch.13: Contents {#contents .TOC-Heading} [KR]

STATERA Library · Series 02 · Volume 02 · Chapter 13 · KR Source: https://github. com/Statera-Library/02_Vol_02_AMR_Mechanical_and_Electrical_Engineering/blob/main/13_Wiring_and_Harness_Design/13_Wiring_and_Harness_Design_KR. md Volume 02.

TechnologyDev.to• 5m ago

AMR Mechanical and Electrical Engineering — Ch.12: Contents {#contents .TOC-Heading} [KR]

STATERA Library · Series 02 · Volume 02 · Chapter 12 · KR Source: https://github. com/Statera-Library/02_Vol_02_AMR_Mechanical_and_Electrical_Engineering/blob/main/12_Emergency_Stop_and_Safety_Circuit/12_Emergency_Stop_and_Safety_Circuit_KR. md Volume 02.

TechnologyDev.to• 5m ago

DSH Agent Enhancer 0.3.9: the agent in your DeepSeek Harness desktop can now drive its own browser

dsh-agent-enhancer is a plugin for the official DeepSeek Harness (DSH) desktop client. This release, 0. 3.

TechnologyDev.to• 5m ago

Call Databricks Genie from C# with LakeSpeak

A Genie question takes more than one API call. Your app starts a conversation, waits for Genie to finish, then reads the answer, SQL, or rows it returns. I maintain LakeSpeak.