mirror of
https://github.com/grafana/grafana.git
synced 2025-07-29 17:22:51 +08:00

This ensures that the X-Grafana-User header can be trusted. If the configuration enabled the setting of this header, the server can now trust that X-Grafana-User is set/unset by Grafana. Before this, an anonymous user could simply set the X-Grafana-User header themselves (using the developer tool for example)