[Django]-Does Heroku strip incoming X-Forwarded-Proto header?

by

4👍

Like documented in Heroku headers, you’ll find:

X-Forwarded-Proto: the originating protocol of the HTTP request (example: https)

This implies that the header will be set by Heroku regardless of the original request header. This can easily be tested by setting the given header with a request manually like mentioned in a comment:

curl -I -H 'X-Forwarded-Proto: https' http://yourapp.heroku.com

This will result in X-Forwarded-Proto being set to http for you.

👤tynn

Leave a comment