diff --git a/app/Http/Middleware/StartupCheck.php b/app/Http/Middleware/StartupCheck.php index b00496f2ed4d..164bb38da5d4 100644 --- a/app/Http/Middleware/StartupCheck.php +++ b/app/Http/Middleware/StartupCheck.php @@ -25,6 +25,13 @@ class StartupCheck */ public function handle($request, Closure $next) { + // Set up trusted X-Forwarded-Proto proxies + // TRUSTED_PROXIES accepts a comma delimited list of subnets + // + // TRUSTED_PROXIES='10.0.0.0/8,172.16.0.0/12,192.168.0.0/16' + if (isset($_ENV['TRUSTED_PROXIES'])) { + Request::setTrustedProxies(array_map('trim',explode(",",env('TRUSTED_PROXIES')))); + } // Ensure all request are over HTTPS in production if (App::environment() == ENV_PRODUCTION && !Request::secure()) { return Redirect::secure(Request::getRequestUri());