Add security note

This commit is contained in:
akp 2025-01-08 20:04:15 +00:00
parent dc8d0bdb35
commit a80a344a7a
No known key found for this signature in database
GPG key ID: CF8D58F3DEB20755

View file

@ -46,6 +46,8 @@ You must configure this plugin on the global level within Datasette. An example
`id-header-name` is case-insensitive and is the only configuration option at this time.
**You should not use this plugin with headers that can be set by the end user.** Your reverse proxy must strip/overwrite the headers you configure the plugin with for this to be secure.
## Development
To set up this plugin locally, first checkout the code. Then create a new virtual environment: