Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-21994

userhash: default kernel should respond to varnish requests from trusted proxies

    Details

    • Type: Improvement Improvement
    • Status: Confirmed
    • Priority: Medium Medium
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Caching
    • Labels:
      None

      Description

      The current code only responds to requests for userhash from localhost, but we can suppose big customers will run varnish on separate servers.
      Allowing requests from trusted IPs should be easy to setup without writing php code.
      As suggested by Joao, we could use the TRUSTED_PROXIES env var

        Activity

        Show
        Joao Inacio (Inactive) added a comment - Merged in master: https://github.com/ezsystems/ezpublish-kernel/commit/04f38206e1e41842f237c39d8fa24cb9e2b1e2d9
        Show
        Joao Inacio (Inactive) added a comment - Suggested PR: https://github.com/ezsystems/ezpublish-kernel/pull/631

          People

          • Assignee:
            Unassigned
            Reporter:
            Gaetano Giunta (Inactive)
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated: