added option to ignore illegal headers

[jyang-broad]

Ticket: https://broadworkbench.atlassian.net/browse/DDO-2622

What: Adds a new config option to sam's conf for ignoring bad header. This feature was removed in the fc-dev removal, original thread: https://broadinstitute.slack.com/archives/CADM7MZ35/p1665685716707079?thread_ts=1665522324.115159&cid=CADM7MZ35

Why: Becuase otherwise sam (only in BEEs, or any terra using an NGINX ingress) will continously throw x-forwarded-host herrors

How: adds a config to option to ignore those warnings

---

PR checklist

• I've followed the instructions if I've made any changes to the API, especially if they're breaking changes
• I've filled out the Security Risk Assessment (requires Broad Internal network access) and attached the result to the JIRA ticket

[Ghost-in-a-Jar]

Oh jeez maybe I didn't actually test this in a bee

[jyang-broad]

Manual Testing done on configs:
nothing set: sam loads sucessfully, but does not supress warnings

     value: x-forwarded-host

set: x-forwarded-host is supressed but user-agent warnings are not

            - name: IGNORE_ILLEGAL_HEADERS.0
              value: x-forwarded-host
            - name: IGNORE_ILLEGAL_HEADERS.1
              value: user-agent

both x-forwarded-host and user-agent errors are suppressed

[gpolumbo-broad]

mind adding a comment explaining what this is and why it might be used?

[jyang-broad]

gladly! hows that?

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[jyang-broad]

jenkins retest