Skip to content
This repository has been archived by the owner on Dec 16, 2022. It is now read-only.

Gixy warning on your proposed nginx reverse proxy settings #132

Open
pbsds opened this issue Jul 16, 2022 · 0 comments
Open

Gixy warning on your proposed nginx reverse proxy settings #132

pbsds opened this issue Jul 16, 2022 · 0 comments

Comments

@pbsds
Copy link

pbsds commented Jul 16, 2022

Output from gixy, a nginx config linter:

==================== Results ===================

>> Problem: [host_spoofing] The proxied Host header may be spoofed.
Description: In most cases "$host" variable are more appropriate, just use it.
Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md
Pseudo config:

server {
        server_name webdav.foobar.pbsds.net;

        location / {
                proxy_set_header Host $http_host;
        }
}

==================== Summary ===================
Total issues:
    Unspecified: 0
    Low: 0
    Medium: 1
    High: 0
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant