Merge pull request #92 from tractorcow/pulls/3.1.14/fix-api

Ensure BlockUntrustedProxyHeaders is enabled by default
This commit is contained in:
Sam Minnée 2015-06-02 12:42:56 +12:00
commit d92419ec10

View File

@ -27,7 +27,7 @@ ErrorDocument 500 /assets/error-500.html
# Ensure that X-Forwarded-Host is only allowed to determine the request # Ensure that X-Forwarded-Host is only allowed to determine the request
# hostname for servers ips defined by SS_TRUSTED_PROXY_IPS in your _ss_environment.php # hostname for servers ips defined by SS_TRUSTED_PROXY_IPS in your _ss_environment.php
# Note that in a future release this setting will be always on. # Note that in a future release this setting will be always on.
#SetEnv BlockUntrustedProxyHeaders true SetEnv BlockUntrustedIPs true
</IfModule> </IfModule>
<IfModule mod_rewrite.c> <IfModule mod_rewrite.c>