Proxy domain rewrite using proxy_cookie_domain

nitin nginx-forum at forum.nginx.org
Mon Feb 15 06:29:01 UTC 2016


Thanks for reply.
In case client is just a browser then it will send all the cookies with NGIX
domain which means that NGIX will send all the cookies to backend server
irrespective of who initially set it in set-cookie header.. This could be a
security issue then.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,264499,264537#msg-264537



More information about the nginx mailing list