webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 03:33:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix potential HTTPoxy vulnerability

Browse Source 
https://httpoxy.org/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2016-07-19 15:01:05 +01:00
parent 71f578bbfc
commit 3b7d73d1d4
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
config/httpd/global.conf
View File

@@ -8,3 +8,6 @@ Include /etc/httpd/conf/hostname.conf
HostnameLookups off HostnameLookups off
AddHandler cgi-script .cgi AddHandler cgi-script .cgi
EnableSendfile Off EnableSendfile Off
# Always unset HTTP_PROXY variable, https://httpoxy.org
RequestHeader unset Proxy early

1
config/rootfiles/core/104/filelists/files
View File

@@ -1,5 +1,6 @@
etc/system-release etc/system-release
etc/issue etc/issue
etc/collectd.conf etc/collectd.conf
etc/httpd/conf/global.conf
opt/pakfire/lib/functions.sh opt/pakfire/lib/functions.sh
srv/web/ipfire/cgi-bin/ids.cgi srv/web/ipfire/cgi-bin/ids.cgi