kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 30 Pull Requests 3 Projects 2 Activity

Mitigate httpoxy

Browse Source 
https://httpoxy.org
This commit is contained in:
Greg Karékinian 2016-07-28 12:30:13 +02:00
parent 58604212ec
commit 90835233de
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
site-cookbooks/kosmos-wordpress/templates/default/nginx.conf.erb
View File

@ -29,6 +29,9 @@ server {
include fastcgi_params; include fastcgi_params;
fastcgi_pass 127.0.0.1:9001; fastcgi_pass 127.0.0.1:9001;
fastcgi_param SCRIPT_FILENAME <%= @docroot %>$fastcgi_script_name; fastcgi_param SCRIPT_FILENAME <%= @docroot %>$fastcgi_script_name;
# Remove the HTTP_PROXY parameter, protect from the HTTPoxy vulnerability
# https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/
fastcgi_param HTTP_PROXY "";
} }
<% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%> <% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%>