httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 59829] Detect HTTPS marker from reverse proxy
Date Wed, 07 Dec 2016 16:07:09 GMT
https://bz.apache.org/bugzilla/show_bug.cgi?id=59829

--- Comment #5 from martin.kofahl@gmail.com ---
Created attachment 34504
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=34504&action=edit
reset scheme and port if next request to be processed is http; set scheme and
port only from trusted proxies

The existing patches lacks resetting scheme and port if the request object is
reused by apache. Additionally, scheme and port should only be modified if the
request was received from a trusted proxy. Both modifications may executed
independently, e.g. setting the scheme when remote ip is invalid or header is
absent.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message