mirror of
https://github.com/silverstripe/silverstripe-installer
synced 2024-10-22 17:05:33 +02:00
Ensure BlockUntrustedProxyHeaders is enabled by default
This commit is contained in:
parent
e759ffbcdc
commit
d467b16bf2
@ -27,7 +27,7 @@ ErrorDocument 500 /assets/error-500.html
|
||||
# Ensure that X-Forwarded-Host is only allowed to determine the request
|
||||
# hostname for servers ips defined by SS_TRUSTED_PROXY_IPS in your _ss_environment.php
|
||||
# Note that in a future release this setting will be always on.
|
||||
#SetEnv BlockUntrustedProxyHeaders true
|
||||
SetEnv BlockUntrustedIPs true
|
||||
</IfModule>
|
||||
|
||||
<IfModule mod_rewrite.c>
|
||||
|
Loading…
Reference in New Issue
Block a user