docs(request-debug): Add special note for loopback debug requests not…

… requiring token.
Kong · Sep 20, 2024 · ad76ee0 · ad76ee0
1 parent 2ba3de1
commit ad76ee0
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/kong.conf.default b/kong.conf.default
@@ -2264,8 +2264,11 @@
                                  #
                                  # - `X-Kong-Request-Debug-Token`:
                                  #   Token for authenticating the client making the debug
-                                 #   request to prevent abuse. Debug requests originating from loopback
-                                 #   addresses do not require this header.
+                                 #   request to prevent abuse.
+                                 #   ** Note: Debug requests originating from loopback
+                                 #   addresses do not require this header. Deploying Kong behind
+                                 #   other proxies may result in exposing the debug interface to
+                                 #   the public.**
                                  #
 #request_debug_token = <random>  # The Request Debug Token is used in the
                                  # `X-Kong-Request-Debug-Token` header to prevent abuse.