diff options
author | Eric Wong <e@80x24.org> | 2014-05-25 04:40:20 +0000 |
---|---|---|
committer | Eric Wong <e@80x24.org> | 2014-05-29 20:12:04 +0000 |
commit | 5bd61b57d63ae86fc246531d3a483c15ee0dcd57 (patch) | |
tree | 9810d265992167770f426a25c003ed362cc25771 /lib/unicorn/configurator.rb | |
parent | 9f72638e08d7d08eadffe6b0299205b6620f250e (diff) | |
download | unicorn-5bd61b57d63ae86fc246531d3a483c15ee0dcd57.tar.gz |
This has long been considered a mistake and not documented for very long. I considered removing X-Forwarded-Proto and X-Forwarded-SSL handling, too, so rack.url_scheme is always "http", but that might lead to compatibility issues in rare apps if Rack::Request#scheme is not used.
Diffstat (limited to 'lib/unicorn/configurator.rb')
-rw-r--r-- | lib/unicorn/configurator.rb | 13 |
1 files changed, 0 insertions, 13 deletions
diff --git a/lib/unicorn/configurator.rb b/lib/unicorn/configurator.rb index 9406223..5962418 100644 --- a/lib/unicorn/configurator.rb +++ b/lib/unicorn/configurator.rb @@ -48,7 +48,6 @@ class Unicorn::Configurator :check_client_connection => false, :rewindable_input => true, # for Rack 2.x: (Rack::VERSION[0] <= 1), :client_body_buffer_size => Unicorn::Const::MAX_BODY, - :trust_x_forwarded => true, } #:startdoc: @@ -558,18 +557,6 @@ class Unicorn::Configurator set[:user] = [ user, group ] end - # Sets whether or not the parser will trust X-Forwarded-Proto and - # X-Forwarded-SSL headers and set "rack.url_scheme" to "https" accordingly. - # Rainbows!/Zbatery installations facing untrusted clients directly - # should set this to +false+. This is +true+ by default as Unicorn - # is designed to only sit behind trusted nginx proxies. - # - # This has never been publically documented and is subject to removal - # in future releases. - def trust_x_forwarded(bool) # :nodoc: - set_bool(:trust_x_forwarded, bool) - end - # expands "unix:path/to/foo" to a socket relative to the current path # expands pathnames of sockets if relative to "~" or "~username" # expands "*:port and ":port" to "0.0.0.0:port" |