https://bz.apache.org/bugzilla/show_bug.cgi?id=59829

--- Comment #3 from [email protected] ---
This part worries me about your proposal

r->server->server_scheme = config->secure_header_value;

This is not guaranteed to always be "http" or "https". That variable is set by
the user, because you can't guarantee how their existing reverse proxy server
reports it. I think it should be changed just to:

r->server->server_scheme = "https";

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to