From a51e96b1130b3a599a9b8de78a00dd3ac7f40b66 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Wed, 5 Jul 2023 00:43:52 +0200 Subject: [PATCH] [autopatch] Fix Host and X-Forwarded-For header spoofing --- conf/nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 63e23ca..30e7b04 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -22,7 +22,7 @@ location ^~ /packs/ { location @puma { proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header Host $http_host; + proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_redirect off; proxy_pass http://localhost:__PORT__;