🔒 Fixing security issues. #I9DJOU 单体版本由于没有网关过滤from头导致inner接口任意访问漏洞

This commit is contained in:
冷冷 2024-04-02 12:42:00 +08:00
parent 9b3b743891
commit 3d680f474a

View File

@ -26,5 +26,6 @@ server {
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_set_header from "";
} }
} }