From 0aed7873ed25e086c2a43f5c8f515d5ba27682bc Mon Sep 17 00:00:00 2001 From: arubacao Date: Wed, 21 Feb 2018 11:31:58 +0100 Subject: [PATCH] add option to allow every proxy --- app/Http/Middleware/StartupCheck.php | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/app/Http/Middleware/StartupCheck.php b/app/Http/Middleware/StartupCheck.php index 71d3d971381c..f4cd6e23d864 100644 --- a/app/Http/Middleware/StartupCheck.php +++ b/app/Http/Middleware/StartupCheck.php @@ -36,8 +36,13 @@ class StartupCheck // Set up trusted X-Forwarded-Proto proxies // TRUSTED_PROXIES accepts a comma delimited list of subnets // ie, TRUSTED_PROXIES='10.0.0.0/8,172.16.0.0/12,192.168.0.0/16' + // set TRUSTED_PROXIES=* if you want to trust every proxy. if (isset($_ENV['TRUSTED_PROXIES'])) { - $request->setTrustedProxies(array_map('trim', explode(',', env('TRUSTED_PROXIES')))); + if (env('TRUSTED_PROXIES') == '*') { + $request->setTrustedProxies(['127.0.0.1', $request->server->get('REMOTE_ADDR')]); + } else{ + $request->setTrustedProxies(array_map('trim', explode(',', env('TRUSTED_PROXIES')))); + } } // Ensure all request are over HTTPS in production