From c2cee43721483038737c620a82971f48716f1b3b Mon Sep 17 00:00:00 2001 From: Patrick McAndrew Date: Fri, 8 May 2015 14:09:35 +0100 Subject: [PATCH 1/3] Update load_balancer_reverse_proxy.rst Remind that the trusted_proxies setting needs to be removed or the setTrustedProxies method call will be overwritten. --- cookbook/request/load_balancer_reverse_proxy.rst | 3 +++ 1 file changed, 3 insertions(+) diff --git a/cookbook/request/load_balancer_reverse_proxy.rst b/cookbook/request/load_balancer_reverse_proxy.rst index e23e0ac01c2..650d9bf7421 100644 --- a/cookbook/request/load_balancer_reverse_proxy.rst +++ b/cookbook/request/load_balancer_reverse_proxy.rst @@ -83,6 +83,9 @@ In this case, you'll need to - *very carefully* - trust *all* proxies. $response = $kernel->handle($request); // ... +#. Ensure that the trusted_proxies setting in your app/config/config.yml is not set or + it will overwrite the setTrustedProxies call above. + That's it! It's critical that you prevent traffic from all non-trusted sources. If you allow outside traffic, they could "spoof" their true IP address and other information. From 51b383aa5b1973e2f8e9920957d2669e298d9f5a Mon Sep 17 00:00:00 2001 From: Patrick McAndrew Date: Tue, 26 May 2015 09:04:55 +0100 Subject: [PATCH 2/3] Add formatting for file and method names --- cookbook/request/load_balancer_reverse_proxy.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cookbook/request/load_balancer_reverse_proxy.rst b/cookbook/request/load_balancer_reverse_proxy.rst index 650d9bf7421..6bd4d1661dc 100644 --- a/cookbook/request/load_balancer_reverse_proxy.rst +++ b/cookbook/request/load_balancer_reverse_proxy.rst @@ -83,8 +83,8 @@ In this case, you'll need to - *very carefully* - trust *all* proxies. $response = $kernel->handle($request); // ... -#. Ensure that the trusted_proxies setting in your app/config/config.yml is not set or - it will overwrite the setTrustedProxies call above. +#. Ensure that the trusted_proxies setting in your ``app/config/config.yml`` is not set or + it will overwrite the ``setTrustedProxies`` call above. That's it! It's critical that you prevent traffic from all non-trusted sources. If you allow outside traffic, they could "spoof" their true IP address and From 9589ae089f1c0590cfba2ab890e2011a5c09dec6 Mon Sep 17 00:00:00 2001 From: Patrick McAndrew Date: Tue, 2 Jun 2015 11:31:47 +0100 Subject: [PATCH 3/3] Adjust line wrapping --- cookbook/request/load_balancer_reverse_proxy.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cookbook/request/load_balancer_reverse_proxy.rst b/cookbook/request/load_balancer_reverse_proxy.rst index 6bd4d1661dc..60c8d23ff0d 100644 --- a/cookbook/request/load_balancer_reverse_proxy.rst +++ b/cookbook/request/load_balancer_reverse_proxy.rst @@ -83,8 +83,8 @@ In this case, you'll need to - *very carefully* - trust *all* proxies. $response = $kernel->handle($request); // ... -#. Ensure that the trusted_proxies setting in your ``app/config/config.yml`` is not set or - it will overwrite the ``setTrustedProxies`` call above. +#. Ensure that the trusted_proxies setting in your ``app/config/config.yml`` + is not set or it will overwrite the ``setTrustedProxies`` call above. That's it! It's critical that you prevent traffic from all non-trusted sources. If you allow outside traffic, they could "spoof" their true IP address and