mirror of
https://github.com/grafana/grafana.git
synced 2025-09-18 14:13:00 +08:00

This ensures that the X-Grafana-User header can be trusted. If the configuration enabled the setting of this header, the server can now trust that X-Grafana-User is set/unset by Grafana. Before this, an anonymous user could simply set the X-Grafana-User header themselves (using the developer tool for example)