diff --git a/packages/cli-kit/src/public/node/graphiql/utilities.ts b/packages/cli-kit/src/public/node/graphiql/utilities.ts index 85573897f08..ebcf081a675 100644 --- a/packages/cli-kit/src/public/node/graphiql/utilities.ts +++ b/packages/cli-kit/src/public/node/graphiql/utilities.ts @@ -15,7 +15,11 @@ const BLOCKED_HEADERS = new Set([ 'trailer', 'transfer-encoding', 'upgrade', - + 'x-forwarded-for', + 'x-forwarded-host', + 'x-forwarded-proto', + 'x-real-ip', + 'cf-connecting-ip', // Headers the proxy controls 'host', 'content-length',