Harden Progmaweb account API and CI coverage credentials

1 files changed, 3 insertions, 7 deletions

diff --git a/apps/api/Program.cs b/apps/api/Program.cs
index deb3472..0b71d06 100644
--- a/apps/api/Program.cs
+++ b/apps/api/Program.cs
@@ -53,13 +53,9 @@ builder.Services.AddRateLimiter(options =>
     });
 });
 
-builder.Services.Configure<ForwardedHeadersOptions>(options =>
-{
-    options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedHost |
-        ForwardedHeaders.XForwardedProto;
-    options.KnownIPNetworks.Clear();
-    options.KnownProxies.Clear();
-});
+builder.Services.Configure<ForwardedHeadersOptions>(ForwardedHeadersPolicy.Configure);
+
+builder.WebHost.ConfigureKestrel(options => options.Limits.MaxRequestBodySize = 16 * 1024);
 
 WebApplication app = builder.Build();