fix: set securityTrustProxy to false by default

b1e1759f · Nicolas Giard · GitHub · 99e74e8e · b1e1759f · b1e1759f
Unverified Commit b1e1759f authored Jan 28, 2024 by Nicolas Giard Committed by GitHub Jan 28, 2024
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

admin-security.vue client/components/admin/admin-security.vue +1 -1

data.yml server/app/data.yml +1 -1

No files found.
--- a/client/components/admin/admin-security.vue
+++ b/client/components/admin/admin-security.vue
@@ -265,7 +265,7 @@ export default {
        securityOpenRedirect: true,
        securityIframe: true,
        securityReferrerPolicy: true,
-        securityTrustProxy: true,
+        securityTrustProxy: false,
        securitySRI: true,
        securityHSTS: false,
        securityHSTSDuration: 0,

--- a/server/app/data.yml
+++ b/server/app/data.yml
@@ -85,7 +85,7 @@ defaults:
      securityOpenRedirect: true
      securityIframe: true
      securityReferrerPolicy: true
-      securityTrustProxy: true
+      securityTrustProxy: false
      securitySRI: true
      securityHSTS: false
      securityHSTSDuration: 300