From 5a8c01e6efe6c2682333a9c522f91d349c363101 Mon Sep 17 00:00:00 2001 From: clfreville2 Date: Fri, 7 Jun 2024 19:45:10 +0200 Subject: [PATCH] Trust common reverse proxies --- config/packages/framework.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml index a09ef0c..1616202 100644 --- a/config/packages/framework.yaml +++ b/config/packages/framework.yaml @@ -5,6 +5,8 @@ framework: assets: base_path: '%env(ASSETS_BASE_PATH)%' + trusted_proxies: '127.0.0.1,private_ranges' + trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port', 'x-forwarded-prefix'] # Note that the session will be started ONLY if you read or write from it. session: true