Skip to content

Commit fd02abe

Browse files
committed
remove unsupported trusted header config values
1 parent e31a19d commit fd02abe

File tree

1 file changed

+0
-9
lines changed

1 file changed

+0
-9
lines changed

deployment/proxies.rst

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -37,9 +37,6 @@ and what headers your reverse proxy uses to send information:
3737
trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port']
3838
// or, if your proxy instead uses the "Forwarded" header
3939
trusted_headers: ['forwarded']
40-
// or, if you're using a wellknown proxy
41-
trusted_headers: [!php/const Symfony\\Component\\HttpFoundation\\Request::HEADER_X_FORWARDED_AWS_ELB]
42-
trusted_headers: [!php/const Symfony\\Component\\HttpFoundation\\Request::HEADER_X_FORWARDED_TRAEFIK]
4340
4441
.. code-block:: xml
4542
@@ -80,9 +77,6 @@ and what headers your reverse proxy uses to send information:
8077
'trusted_headers' => ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port'],
8178
// or, if your proxy instead uses the "Forwarded" header
8279
'trusted_headers' => ['forwarded'],
83-
// or, if you're using a wellknown proxy
84-
'trusted_headers' => [Request::HEADER_X_FORWARDED_AWS_ELB],
85-
'trusted_headers' => [Request::HEADER_X_FORWARDED_TRAEFIK],
8680
]);
8781
8882
.. deprecated:: 5.2
@@ -135,9 +129,6 @@ In this case, you'll need to - *very carefully* - trust *all* proxies.
135129
// run time by $_SERVER['REMOTE_ADDR'])
136130
trusted_proxies: '127.0.0.1,REMOTE_ADDR'
137131
138-
// if you're using ELB, otherwise use another Request::HEADER-* constant
139-
trusted_headers: [!php/const Symfony\\Component\\HttpFoundation\\Request::HEADER_X_FORWARDED_AWS_ELB, '!x-forwarded-host', '!x-forwarded-prefix']
140-
141132
That's it! It's critical that you prevent traffic from all non-trusted sources.
142133
If you allow outside traffic, they could "spoof" their true IP address and
143134
other information.

0 commit comments

Comments
 (0)