Merge pull request #14606 from nextcloud/bugfix/stricter-check-trusted-proxy

Make check for empty trusted proxies more strict
This commit is contained in:
Morris Jobke 2019-03-21 09:15:27 +01:00 committed by GitHub
commit aee0b7693b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -289,7 +289,7 @@ class CheckSetupController extends Controller {
$trustedProxies = $this->config->getSystemValue('trusted_proxies', []);
$remoteAddress = $this->request->getHeader('REMOTE_ADDR');
if (empty($trustedProxies) && $this->request->getHeader('X-Forwarded-Host')) {
if (empty($trustedProxies) && $this->request->getHeader('X-Forwarded-Host') !== '') {
return false;
}