diff options
| author |   Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2016-02-22 15:09:05 +0200 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2016-02-22 15:26:54 +0200 |
| commit | 5f915a88e7c4eec6e6a0341808f0fbc4a4b1a161 (patch) | |
| tree | 6f24fd2f26519e53b9c35c53f8db0bcc20716a57 /Gemfile | |
| parent | 94a1aefd6213180804db4c7da9de477e1cc51a31 (diff) | |
Override X-Forwarded-Proto header
Right now, the only manipulation done to the X-Forwarded-Proto header
is done if an SSL connection is established. This is not sufficient as
one might be able to erroneously put values through that header.
This patch disables that behaviour by defaulting to plain http if an
SSL connection is not established.
Change-Id: I4bf6def21e21148834c2baa9669190bab8fa95ef
Diffstat (limited to 'Gemfile')
0 files changed, 0 insertions, 0 deletions