HTTP_X_FORWARDED_FORとかをリモホに含めるのをやめる

• Reporter: dekisugi
• Owner: dekisugi
• Type: セキュリティの向上
• Status: Closed
• Component: zerochplus 0.6.x stable
• MileStone: 0.6.5 (closed)
• Priority: 9 - Highest
• Severity: 7
• Resolution: Fixed
• File: None

Details Reply

現在

• HTTP_VIA
• HTTP_X_FORWARDED_FOR
• HTTP_FORWARDED

が存在する場合

samwise->HOST

に

REMOTE_HOST<FORWARDED>

の形で含まれます。

誰得どころか害しかないように思えるので、これをやめます。

Ticket History (3/3 Histories)

2012-05-20 17:58 Updated by: dekisugi

• New Ticket "HTTP_X_FORWARDED_FORとかをリモホに含めるのをやめる" created

2012-05-20 18:04 Updated by: dekisugi

• Resolution Update from None to Fixed
• Owner Update from (None) to dekisugi

2012-05-20 18:05 Updated by: dekisugi

• Status Update from Open to Closed
• Ticket Close date is changed to 2012-05-20 18:05