Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Nginx: httpoxy vulnerable #151

Open
ragnarkurmwunder opened this issue Sep 8, 2020 · 0 comments
Open

Nginx: httpoxy vulnerable #151

ragnarkurmwunder opened this issue Sep 8, 2020 · 0 comments
Labels
bug Something isn't working invalid This doesn't seem right nginx

Comments

@ragnarkurmwunder
Copy link
Contributor

https://wunder.slack.com/archives/CAC0EPL1G/p1598441452006300?thread_ts=1598441403.006200&cid=CAC0EPL1G

I see:

# Mitigate HTTPoxy
# https://httpoxy.org/
fastcgi_param HTTP_PROXY '';

at the top level of the drupal conf.
Should it not be in fastcgi.conf?

At least I'm not able to create any fastcgi_param at the top level that is passed down to Php-fpm.
@ragnarkurmwunder ragnarkurmwunder added bug Something isn't working invalid This doesn't seem right nginx labels Sep 8, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working invalid This doesn't seem right nginx
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ragnarkurmwunder