SafeCrossScheme internal redirect predicate (proto)

extensions.internal_redirect.safe_cross_scheme.v3.SafeCrossSchemeConfig

[extensions.internal_redirect.safe_cross_scheme.v3.SafeCrossSchemeConfig proto]

An internal redirect predicate that checks the scheme between the downstream url and the redirect target url and allows a) same scheme redirect and b) safe cross scheme redirect, which means if the downstream scheme is HTTPS, both HTTPS and HTTP redirect targets are allowed, but if the downstream scheme is HTTP, only HTTP redirect targets are allowed.

This extension has the qualified name envoy.internal_redirect_predicates.safe_cross_scheme

Note

This extension is intended to be robust against both untrusted downstream and upstream traffic.

Tip

This extension extends and can be used with the following extension category:

• envoy.internal_redirect_predicates

This extension must be configured with one of the following type URLs:

• type.googleapis.com/envoy.extensions.internal_redirect.safe_cross_scheme.v3.SafeCrossSchemeConfig