https://bz.apache.org/bugzilla/show_bug.cgi?id=59829
--- Comment #5 from [email protected] --- Created attachment 34504 --> https://bz.apache.org/bugzilla/attachment.cgi?id=34504&action=edit reset scheme and port if next request to be processed is http; set scheme and port only from trusted proxies The existing patches lacks resetting scheme and port if the request object is reused by apache. Additionally, scheme and port should only be modified if the request was received from a trusted proxy. Both modifications may executed independently, e.g. setting the scheme when remote ip is invalid or header is absent. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
