Allow x-forwarded-prefix trusted header.

drupol · nicolas-grekas · commit 95fdd90491e6 · 2021-02-23T16:58:22.000+01:00
diff --git a/src/Symfony/Bundle/FrameworkBundle/DependencyInjection/Configuration.php b/src/Symfony/Bundle/FrameworkBundle/DependencyInjection/Configuration.php
@@ -97,7 +97,7 @@ public function getConfigTreeBuilder()
                     ->enumPrototype()
                         ->values([
                             'forwarded',
-                            'x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port',
+                            'x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port', 'x-forwarded-prefix',
                         ])
                     ->end()
                 ->end()
diff --git a/src/Symfony/Bundle/FrameworkBundle/DependencyInjection/FrameworkExtension.php b/src/Symfony/Bundle/FrameworkBundle/DependencyInjection/FrameworkExtension.php
@@ -2305,6 +2305,7 @@ private function resolveTrustedHeaders(array $headers): int
                 case 'x-forwarded-host': $trustedHeaders |= Request::HEADER_X_FORWARDED_HOST; break;
                 case 'x-forwarded-proto': $trustedHeaders |= Request::HEADER_X_FORWARDED_PROTO; break;
                 case 'x-forwarded-port': $trustedHeaders |= Request::HEADER_X_FORWARDED_PORT; break;
+                case 'x-forwarded-prefix': $trustedHeaders |= Request::HEADER_X_FORWARDED_PREFIX; break;
             }
         }
 

Original file line number	Diff line number	Diff line change
`@@ -2305,6 +2305,7 @@ private function resolveTrustedHeaders(array $headers): int`
`2305`	`2305`	`case 'x-forwarded-host': $trustedHeaders \|= Request::HEADER_X_FORWARDED_HOST; break;`
`2306`	`2306`	`case 'x-forwarded-proto': $trustedHeaders \|= Request::HEADER_X_FORWARDED_PROTO; break;`
`2307`	`2307`	`case 'x-forwarded-port': $trustedHeaders \|= Request::HEADER_X_FORWARDED_PORT; break;`
	`2308`	`+ case 'x-forwarded-prefix': $trustedHeaders \|= Request::HEADER_X_FORWARDED_PREFIX; break;`
`2308`	`2309`	`}`
`2309`	`2310`	`}`
`2310`	`2311`