This repository has been archived on 2023-08-20. You can view files and clone it, but cannot push or open issues or pull requests.

Fabien Potencier 518ec864e9 bug #26973 [HttpKernel] Set first trusted proxy as REMOTE_ADDR in InlineFragmentRenderer. (kmadejski) ... This PR was squashed before being merged into the 2.8 branch (closes #26973). Discussion ---------- [HttpKernel] Set first trusted proxy as REMOTE_ADDR in InlineFragmentRenderer. | Q | A | ------------- | --- | Branch? | 2.7 and up | Bug fix? | improvement | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | --- | License | MIT | Doc PR | --- SubRequest used in `InlineFragmentRendered` explicitly sets `$server['REMOTE_ADDR']` to `127.0.0.1`. Therefore, it's required to configure `127.0.0.1` address in TRUSTED_PROXIES environment variable. Without that, `Request::isFromTrustedProxy()` will return false. The current behavior might be a little bit problematic, for instance, in case where images are rendered through subrequests. These might end-up with an incorrect schema in URL (`http` instead of `https`). Commits ------- 18f55feef8 [HttpKernel] Set first trusted proxy as REMOTE_ADDR in InlineFragmentRenderer.		2018-05-27 09:44:41 +02:00
..
Bridge	Fix security/* cross-dependencies	2018-05-17 12:20:34 +02:00
Bundle	fixed constraints	2018-05-25 09:32:23 +02:00
Component	bug #26973 [HttpKernel] Set first trusted proxy as REMOTE_ADDR in InlineFragmentRenderer. (kmadejski)	2018-05-27 09:44:41 +02:00