Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

bepasty-server: fix proxied host header spoofing

Browse Source
This commit is contained in:
lassulus 2019-10-10 14:48:45 +02:00
parent 7fb3248a6c
commit c8e29c89bc
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
krebs/3modules/bepasty-server.nix
View File

@ -164,7 +164,7 @@ let
client_max_body_size 32M; client_max_body_size 32M;
''; '';
locations = { locations = {
"/".extraConfig = "proxy_set_header Host $http_host;"; "/".extraConfig = "proxy_set_header Host $host;";
"/".proxyPass = "http://unix:${server.workDir}/gunicorn-${name}.sock"; "/".proxyPass = "http://unix:${server.workDir}/gunicorn-${name}.sock";
"/static/".extraConfig = '' "/static/".extraConfig = ''
alias ${bepasty}/lib/${python.libPrefix}/site-packages/bepasty/static/; alias ${bepasty}/lib/${python.libPrefix}/site-packages/bepasty/static/;