Harden the reverse proxy's HTTP header boundary.
Harden the reverse proxy's HTTP header boundary.: a task in MiMo-V2.6-RL-oss: Agentic RL Environments (MiMo RL release). A Connection field describes only the current transport hop, but the proxy currently forwards request-side connection metadata and only applies a small static denylist to…
The task
A Connection field describes only the current transport hop, but the proxy currently forwards request-side connection metadata and only applies a small static denylist to upstream responses. That can leak credentials or internal control fields, and response fields that should…
Part of XiaomiMiMo/MiMo-V2.6-RL-oss.