kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 30 Pull Requests 3 Projects 2 Activity

Mitigate the httpoxy vulnerability

Browse Source 
https://httpoxy.org
This commit is contained in:
Greg Karékinian 2016-07-28 12:25:34 +02:00
parent e7f10a98b6
commit 58604212ec
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
site-cookbooks/kosmos-mediawiki/templates/default/nginx.conf.erb
View File

@ -25,6 +25,9 @@ server {
include fastcgi_params; include fastcgi_params;
fastcgi_pass 127.0.0.1:9002; fastcgi_pass 127.0.0.1:9002;
fastcgi_param SCRIPT_FILENAME <%= @docroot %>$fastcgi_script_name; fastcgi_param SCRIPT_FILENAME <%= @docroot %>$fastcgi_script_name;
# Remove the HTTP_PROXY parameter, protect from the HTTPoxy vulnerability
# https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/
fastcgi_param HTTP_PROXY "";
} }
ssl_certificate <%= @ssl_cert %>; ssl_certificate <%= @ssl_cert %>;