Skip to content

Commit 7dc9f88

Browse files
Merge branch '3.4' into 4.0
* 3.4: [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
2 parents e5a8475 + 19a3267 commit 7dc9f88

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

Request.php

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1941,6 +1941,11 @@ private function getTrustedValues($type, $ip = null)
19411941
if ((self::$trustedHeaderSet & self::HEADER_FORWARDED) && $this->headers->has(self::$trustedHeaders[self::HEADER_FORWARDED])) {
19421942
$forwardedValues = $this->headers->get(self::$trustedHeaders[self::HEADER_FORWARDED]);
19431943
$forwardedValues = preg_match_all(sprintf('{(?:%s)=(?:"?\[?)([a-zA-Z0-9\.:_\-/]*+)}', self::$forwardedParams[$type]), $forwardedValues, $matches) ? $matches[1] : array();
1944+
if (self::HEADER_X_FORWARDED_PORT === $type) {
1945+
foreach ($forwardedValues as $k => $v) {
1946+
$forwardedValues[$k] = substr_replace($v, '0.0.0.0', 0, strrpos($v, ':'));
1947+
}
1948+
}
19441949
}
19451950

19461951
if (null !== $ip) {

0 commit comments

Comments
 (0)