From fd16e4a2dd07955120836396e45ad174dddec8f0 Mon Sep 17 00:00:00 2001
From: austinjump-dev <jerrysturgis5@gmail.com>
Date: Wed, 22 Jul 2026 06:34:02 +0000
Subject: [PATCH] Update BLOCKED_HEADERS to include proxy spoofing headers

---
 packages/cli-kit/src/public/node/graphiql/utilities.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/packages/cli-kit/src/public/node/graphiql/utilities.ts b/packages/cli-kit/src/public/node/graphiql/utilities.ts
index 85573897f08..ebcf081a675 100644
--- a/packages/cli-kit/src/public/node/graphiql/utilities.ts
+++ b/packages/cli-kit/src/public/node/graphiql/utilities.ts
@@ -15,7 +15,11 @@ const BLOCKED_HEADERS = new Set([
   'trailer',
   'transfer-encoding',
   'upgrade',
-
+  'x-forwarded-for',
+  'x-forwarded-host',
+  'x-forwarded-proto',
+  'x-real-ip',
+  'cf-connecting-ip',
   // Headers the proxy controls
   'host',
   'content-length',