Browse Source
fix: set securityTrustProxy to false by default
pull/6810/merge
v2.5.301
Nicolas Giard
10 months ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with
2 additions and
2 deletions
-
client/components/admin/admin-security.vue
-
server/app/data.yml
|
|
|
@ -265,7 +265,7 @@ export default { |
|
|
|
securityOpenRedirect: true, |
|
|
|
securityIframe: true, |
|
|
|
securityReferrerPolicy: true, |
|
|
|
securityTrustProxy: true, |
|
|
|
securityTrustProxy: false, |
|
|
|
securitySRI: true, |
|
|
|
securityHSTS: false, |
|
|
|
securityHSTSDuration: 0, |
|
|
|
|
|
|
|
@ -85,7 +85,7 @@ defaults: |
|
|
|
securityOpenRedirect: true |
|
|
|
securityIframe: true |
|
|
|
securityReferrerPolicy: true |
|
|
|
securityTrustProxy: true |
|
|
|
securityTrustProxy: false |
|
|
|
securitySRI: true |
|
|
|
securityHSTS: false |
|
|
|
securityHSTSDuration: 300 |
|
|
|
|
