From b2dfab3094cc632359fe6329da2f1e714d124fc8 Mon Sep 17 00:00:00 2001
From: bakerboy448 <55419169+bakerboy448@users.noreply.github.com>
Date: Fri, 1 Dec 2023 19:02:05 -0600
Subject: [PATCH 1/2] ignore even more headers

---
 pkg/bindata/templates/profile.html | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/pkg/bindata/templates/profile.html b/pkg/bindata/templates/profile.html
index 6913535de..797705f14 100644
--- a/pkg/bindata/templates/profile.html
+++ b/pkg/bindata/templates/profile.html
@@ -108,7 +108,7 @@ <h4>No Password</h4>
                                             <td>
                                                 <select id="AuthHeader" name="AuthHeader" class="profile-parameter form-control input-sm" type="select">
                                                     {{- range $header, $val := .Headers }}
-                                                        {{- /* Hide some headers, but not the one that's currently selected. */ -}}
+                                                        {{- /* Ignored Headers. Hide some headers, but not the one that's currently selected. */ -}}
                                                         {{ if or (eq (lower $header) (lower $.Config.UIPassword.Header)) (and 
                                                             (ne (lower $header) "accept") (ne (lower $header) "accept-encoding") 
                                                             (ne (lower $header) "accept-language") (ne (lower $header) "cache-control") 
@@ -129,6 +129,13 @@ <h4>No Password</h4>
                                                             (ne (lower $header) "x-forwarded-uri") (ne (lower $header) "x-noticlient-username") 
                                                             (ne (lower $header) "x-original-uri") (ne (lower $header) "x-real-ip") 
                                                             (ne (lower $header) "x-redacted-uri") (ne (lower $header) "x-request-id")
+                                                            (ne (lower $header) "cf-iplongitude") (ne (lower $header) "cf-iplatitude")
+                                                            (ne (lower $header) "cf-ipcontinent") (ne (lower $header) "cf-ipcity")
+                                                            (ne (lower $header) "cf-metro-code") (ne (lower $header) "cf-postal-code")
+                                                            (ne (lower $header) "cf-region") (ne (lower $header) "cf-region-code")
+                                                            (ne (lower $header) "cf-timezone") (ne (lower $header) "x-forwarded-port")
+                                                            (ne (lower $header) "x-original-url") (ne (lower $header) "x-original-method")
+                                                            (ne (lower $header) "x-forwarded-server")
 
                                                         )}}
                                                     <option value="{{$header}}"{{if eq (lower $header) (lower $.Config.UIPassword.Header)}} selected{{end}}>{{$header}}: {{index $val 0}}</option>

From 4335ad9e93548acf78e1370522567254195a315f Mon Sep 17 00:00:00 2001
From: bakerboy448 <55419169+bakerboy448@users.noreply.github.com>
Date: Fri, 1 Dec 2023 19:06:11 -0600
Subject: [PATCH 2/2] alphasort ignored headers

---
 pkg/bindata/templates/profile.html | 46 +++++++++++++++---------------
 1 file changed, 23 insertions(+), 23 deletions(-)

diff --git a/pkg/bindata/templates/profile.html b/pkg/bindata/templates/profile.html
index 797705f14..351265f75 100644
--- a/pkg/bindata/templates/profile.html
+++ b/pkg/bindata/templates/profile.html
@@ -113,29 +113,29 @@ <h4>No Password</h4>
                                                             (ne (lower $header) "accept") (ne (lower $header) "accept-encoding") 
                                                             (ne (lower $header) "accept-language") (ne (lower $header) "cache-control") 
                                                             (ne (lower $header) "cdn-loop") (ne (lower $header) "cf-connecting-ip") 
-                                                            (ne (lower $header) "cf-ipcountry") (ne (lower $header) "cf-ray") 
-                                                            (ne (lower $header) "cf-visitor") (ne (lower $header) "connection") 
-                                                            (ne (lower $header) "cookie") (ne (lower $header) "dnt") 
-                                                            (ne (lower $header) "expect") (ne (lower $header) "pragma") 
-                                                            (ne (lower $header) "priority") (ne (lower $header) "referer") 
-                                                            (ne (lower $header) "sec-ch-ua") (ne (lower $header) "sec-ch-ua-mobile") 
-                                                            (ne (lower $header) "sec-ch-ua-platform") (ne (lower $header) "sec-fetch-dest") 
-                                                            (ne (lower $header) "sec-fetch-mode") (ne (lower $header) "sec-fetch-site") 
-                                                            (ne (lower $header) "strict-transport-security") (ne (lower $header) "te") 
-                                                            (ne (lower $header) "upgrade-insecure-requests") (ne (lower $header) "user-agent") 
-                                                            (ne (lower $header) "x-content-type-options") (ne (lower $header) "x-forwarded-for") 
-                                                            (ne (lower $header) "x-forwarded-host") (ne (lower $header) "x-forwarded-method") 
-                                                            (ne (lower $header) "x-forwarded-proto") (ne (lower $header) "x-forwarded-ssl") 
-                                                            (ne (lower $header) "x-forwarded-uri") (ne (lower $header) "x-noticlient-username") 
-                                                            (ne (lower $header) "x-original-uri") (ne (lower $header) "x-real-ip") 
-                                                            (ne (lower $header) "x-redacted-uri") (ne (lower $header) "x-request-id")
-                                                            (ne (lower $header) "cf-iplongitude") (ne (lower $header) "cf-iplatitude")
-                                                            (ne (lower $header) "cf-ipcontinent") (ne (lower $header) "cf-ipcity")
-                                                            (ne (lower $header) "cf-metro-code") (ne (lower $header) "cf-postal-code")
-                                                            (ne (lower $header) "cf-region") (ne (lower $header) "cf-region-code")
-                                                            (ne (lower $header) "cf-timezone") (ne (lower $header) "x-forwarded-port")
-                                                            (ne (lower $header) "x-original-url") (ne (lower $header) "x-original-method")
-                                                            (ne (lower $header) "x-forwarded-server")
+                                                            (ne (lower $header) "cf-ipcity") (ne (lower $header) "cf-ipcontinent") 
+                                                            (ne (lower $header) "cf-ipcountry") (ne (lower $header) "cf-iplatitude") 
+                                                            (ne (lower $header) "cf-iplongitude") (ne (lower $header) "cf-metro-code") 
+                                                            (ne (lower $header) "cf-postal-code") (ne (lower $header) "cf-ray") 
+                                                            (ne (lower $header) "cf-region") (ne (lower $header) "cf-region-code") 
+                                                            (ne (lower $header) "cf-timezone") (ne (lower $header) "cf-visitor") 
+                                                            (ne (lower $header) "connection") (ne (lower $header) "cookie") 
+                                                            (ne (lower $header) "dnt") (ne (lower $header) "expect") 
+                                                            (ne (lower $header) "pragma") (ne (lower $header) "priority") 
+                                                            (ne (lower $header) "referer") (ne (lower $header) "sec-ch-ua") 
+                                                            (ne (lower $header) "sec-ch-ua-mobile") (ne (lower $header) "sec-ch-ua-platform") 
+                                                            (ne (lower $header) "sec-fetch-dest") (ne (lower $header) "sec-fetch-mode") 
+                                                            (ne (lower $header) "sec-fetch-site") (ne (lower $header) "strict-transport-security") 
+                                                            (ne (lower $header) "te") (ne (lower $header) "upgrade-insecure-requests") 
+                                                            (ne (lower $header) "user-agent") (ne (lower $header) "x-content-type-options") 
+                                                            (ne (lower $header) "x-forwarded-for") (ne (lower $header) "x-forwarded-host") 
+                                                            (ne (lower $header) "x-forwarded-method") (ne (lower $header) "x-forwarded-port") 
+                                                            (ne (lower $header) "x-forwarded-proto") (ne (lower $header) "x-forwarded-server") 
+                                                            (ne (lower $header) "x-forwarded-ssl") (ne (lower $header) "x-forwarded-uri") 
+                                                            (ne (lower $header) "x-noticlient-username") (ne (lower $header) "x-original-method") 
+                                                            (ne (lower $header) "x-original-uri") (ne (lower $header) "x-original-url") 
+                                                            (ne (lower $header) "x-real-ip") (ne (lower $header) "x-redacted-uri") 
+                                                            (ne (lower $header) "x-request-id")
 
                                                         )}}
                                                     <option value="{{$header}}"{{if eq (lower $header) (lower $.Config.UIPassword.Header)}} selected{{end}}>{{$header}}: {{index $val 0}}</option>