You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This can occur when using ssl termination using nginx as a reverse proxy. The download link in the torznab api endpoint returns a link that starts with http://
This results in a problem for applications that don't follow redirects correctly and leaks information when accessing jackett from an untrusted network.
This behavior originates in TorznabController.cs:150, it uses the scheme from the RequestUri which is always http.
The text was updated successfully, but these errors were encountered:
thexa4
changed the title
Wrong schema in torrent download link when behind reverse proxy
Wrong scheme in torrent download link when behind reverse proxy
Jun 9, 2017
This can occur when using ssl termination using nginx as a reverse proxy. The download link in the torznab api endpoint returns a link that starts with http://
This results in a problem for applications that don't follow redirects correctly and leaks information when accessing jackett from an untrusted network.
This behavior originates in TorznabController.cs:150, it uses the scheme from the RequestUri which is always http.
Ideally one of these solutions would be added:
Jackett version: 0.7.1483.0
Mono version (if not using Windows): Debian 4.6.2.7+dfsg-1
Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.
The text was updated successfully, but these errors were encountered: