undefined | Better HN

0 pointssothatsit1mo ago0 comments

Could the proxy place further restrictions like only replacing the placeholder with the real API key in approved HTTP headers? Then an API server is much less likely to reflect it back.

0 comments

tptacek1mo ago

It can, yes. (I don't know how Deno's work, but that's how ours works.)

j / k navigate · click thread line to collapse

0 pointssothatsit1mo ago0 comments

Could the proxy place further restrictions like only replacing the placeholder with the real API key in approved HTTP headers? Then an API server is much less likely to reflect it back.

0 comments

tptacek1mo ago

It can, yes. (I don't know how Deno's work, but that's how ours works.)

j / k navigate · click thread line to collapse