docs(request-debug): add special note for loopback debug requests not…

… requiring token (#13697) Add a special note for `kong.conf.default` to mention that request debug is not authenticated with X-Request-Debug-Token when requests are originating from loopback. KAG-5418
Kong · Oct 9, 2024 · 3a3b6ac · 3a3b6ac · github-actions · Oct 9, 2024
1 parent 98e4291
commit 3a3b6ac
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/kong.conf.default b/kong.conf.default
@@ -2264,8 +2264,11 @@
                                  #
                                  # - `X-Kong-Request-Debug-Token`:
                                  #   Token for authenticating the client making the debug
-                                 #   request to prevent abuse. Debug requests originating from loopback
-                                 #   addresses do not require this header.
+                                 #   request to prevent abuse.
+                                 #   ** Note: Debug requests originating from loopback
+                                 #   addresses do not require this header. Deploying Kong behind
+                                 #   other proxies may result in exposing the debug interface to
+                                 #   the public.**
                                  #
 #request_debug_token = <random>  # The Request Debug Token is used in the
                                  # `X-Kong-Request-Debug-Token` header to prevent abuse.