Private GIT

Skip to content
Snippets Groups Projects
Unverified Commit f4e467a7 authored by Gary Allan's avatar Gary Allan
Browse files

Feature: Do not trust X_FORWARDERED headers by default

If operating behind a reverse proxy set config.php $trust_x_forwarded_headers=true; to accept the following headers

WARNING! These headers shoud be filtered and/or overwritten by the reverse-proxy to avoid potential abuse by end-clients.

    X_FORDWARDED_FOR
    X_FORDWARDED_HOST
    X_FORDWARDED_PORT
    X_FORDWARDED_PROTO
    X_FORDWARDED_SSL
    X_FORWARDED_URI
parent 21caa9a5
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment