mirror of
https://git.tt-rss.org/git/tt-rss.git
synced 2025-12-29 13:31:28 +00:00
sanity: check X-Forwarded-Proto for self_url
This commit is contained in:
@@ -15,7 +15,8 @@
|
||||
* to get out. */
|
||||
|
||||
function make_self_url_path() {
|
||||
$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' : 'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
|
||||
$proto = ($_SERVER['HTTPS'] == 'on' || $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') ? 'https' : 'http';
|
||||
$url_path = $proto . '://' . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
|
||||
|
||||
return $url_path;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user