Commit bce22640 authored by Colan Schwartz's avatar Colan Schwartz
Browse files

Block httpoxy attacks on Nginx. See https://www.drupal.org/node/2768725.

parent cf38406b

submodules/nginx_https/drush/Provision/Config/Nginx/Https/vhost_https.tpl.php

+2 −0
Original line number Diff line number Diff line
@@ -51,6 +51,8 @@ server { 


server {

  include       fastcgi_params;

  # Block https://httpoxy.org/ attacks.

  fastcgi_param HTTP_PROXY "";

  fastcgi_param MAIN_SITE_NAME <?php print $this->uri; ?>;

  set $main_site_name "<?php print $this->uri; ?>";

  fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;