1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/jitsi_ynh.git synced 2024-09-03 19:35:57 +02:00

Merge pull request #116 from YunoHost-Apps/autopatch-http_host

[autopatch] Fix Host and X-Forwarded-For header spoofing
This commit is contained in:
yalh76 2023-07-27 21:29:09 +02:00 committed by GitHub
commit 443f37bf3d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -31,7 +31,7 @@ location ~ ^/(libs|css|static|images|fonts|lang|sounds|connection_optimization|.
location = /http-bind {
proxy_pass http://127.0.0.1:5280/http-bind?prefix=$prefix&$args;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header Host $http_host;
proxy_set_header Host $host;
}
# xmpp websockets
@ -40,7 +40,7 @@ location = /xmpp-websocket {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $http_host;
proxy_set_header Host $host;
tcp_nodelay on;
}