Web frameworks overtrust the HTTP Forwarded: header

3 points | by fanf2 10 hours ago