Node.js · APIs · Mid-Level · Scenario
What headers matter for reverse-proxy deployments?
Short Interview Answer
X-Forwarded-For/Proto/Host — but only trust them from known proxies.
Detailed Explanation
Misconfigured trust causes IP spoofing and insecure cookie flags. Use framework 'trust proxy' carefully.