public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-19 10:01:30 +00:00
Code Issues Releases Wiki Activity

add sanity check for SELF_URL_PATH going to http url if server is accessed over https

Browse Source
This commit is contained in:
Andrew Dolgov
2017-05-05 10:16:54 +03:00
parent 0a79531696
commit e35ba0e212
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
include/sanity_check.php
View File

@@ -147,6 +147,12 @@
if (!class_exists("DOMDocument")) { if (!class_exists("DOMDocument")) {
array_push($errors, "PHP support for DOMDocument is required, but was not found."); array_push($errors, "PHP support for DOMDocument is required, but was not found.");
} }
$self_scheme = parse_url(SELF_URL_PATH, PHP_URL_SCHEME);
if ($_SERVER['HTTPS'] && $self_scheme == 'http') {
array_push($errors, "You are accessing tt-rss over SSL but SELF_URL_PATH in config.php refers to a http:// URL.");
}
} }
if (count($errors) > 0 && $_SERVER['REQUEST_URI']) { ?> if (count($errors) > 0 && $_SERVER['REQUEST_URI']) { ?>