Skip to content

Warning if x-forwarded-host present but trusted_proxies empty - #14261

Merged
MorrisJobke merged 1 commit into
masterfrom
show-warning-if-x-forwarded-set-with-empty-trusted-proxies
Feb 19, 2019
Merged

Warning if x-forwarded-host present but trusted_proxies empty#14261
MorrisJobke merged 1 commit into
masterfrom
show-warning-if-x-forwarded-set-with-empty-trusted-proxies

Conversation

@kesselb

Copy link
Copy Markdown
Contributor

If you run nextcloud behind a reverse proxy then usually X-Forwarded-Host is present:

I've decided against X-Forwarded-For because this will cause a false positive on plesk hosting (nginx in front of apache: https://docs.plesk.com/en-US/onyx/administrator-guide/web-servers/apache-and-nginx-web-servers-linux/apache-with-nginx.70837/)

cc @J0WI will show a warning to docker users with an invalid setup (empty trusted proxies).

@kesselbkesselb added enhancement 3. to review Waiting for reviews labels Feb 17, 2019
@kesselbkesselb added this to the Nextcloud 16 milestone Feb 17, 2019
@kesselb
kesselb marked this pull request as ready for review February 17, 2019 21:06
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
@kesselb
kesselbforce-pushed the show-warning-if-x-forwarded-set-with-empty-trusted-proxies branch from 2571080 to 600bc22CompareFebruary 17, 2019 22:53

@rullzerrullzer left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice one!

@MorrisJobkeMorrisJobke left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

makes sense 👍

@MorrisJobke

Copy link
Copy Markdown
Member

I failure unrelated.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to reviewWaiting for reviewsenhancement

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@kesselb@MorrisJobke@rullzer