Affects Version/s: None
Fix Version/s: None
The current code only responds to requests for userhash from localhost, but we can suppose big customers will run varnish on separate servers.
Allowing requests from trusted IPs should be easy to setup without writing php code.
As suggested by Joao, we could use the TRUSTED_PROXIES env var
|Field||Original Value||New Value|
|Status||Open [ 1 ]||Confirmed [ 10037 ]|
|Workflow||eZ Engineering Scrumban Workflow [ 60172 ]||EZ* Development Workflow [ 70017 ]|
|Workflow||EZ* Development Workflow [ 70017 ]||EZEE Development Workflow [ 108399 ]|
|Transition||Time In Source Status||Execution Times||Last Executer||Last Execution Date|
|15d 2h firstname.lastname@example.org||06/Dec/13 2:30 PM|